I remember learning a few weeks ago that folks who professionally break into buildings (firemen, thieves, etc.) never use the door anymore. Doors are simply too fortified. Instead, one of the best ways to gain entry is often to attack the wall next to the door, which is usually a little weaker because of the door frame, and much weaker than strong fortified door locks.
5% of folks used 12 or more characters in their password, which is really commendable when you’re trying to prevent folks from guessing your password.
Unfortunately, when your passwords are stored in plaintext, the way that yahoo did, it’s kinda like adding extra locks to your door when someone else has left a window open. :(