One of mine was "password1". All the hints were things like "usual", "standard" and "the one I use everywhere". Although not unexpected, this is scary: Not only are people using the same password everywhere, they're using THIS password everyone.
Adobe accounts are something that many have acquired over the years just to get some free trial or something. A very large number of them are totally useless if compromised since there is no actually value or information tied to the account.
It is actually in some ways safer to use this method (password hint of "password is x") than to reuse the same passwords on other sites. Anyone who used a shared password now has to worry about all their other accounts, which are ones that actually matter.
Since Adobe requires you to register before you can download one of their trials, I'd wager that a lot of them are completely throwaway, or just lifted from bugmenot or whatever.
If you already have the answers right, the 'check' button appears not to work, but actually it highlights only those cells which are wrong, so if you've got it right it won't highlight anything.
Ben: Maybe when you get everything right it could give you a big green tick or something?
I've changed it slightly so that when you click check it highlights correct squares in green. I might add a tick later, though that probably won't be until Monday.
I only noticed one password hint that exactly matched the password -- I'd have thought that would be disallowed. Plenty of hints that were the password plus one character, reversed, etc.
UPDATE: Working great now. Really neat idea and great UX. Kudos :)
Could you list them here? They don't seem to be added to your nameserver yet:
# dig @ns1.uwcs.co.uk zed0.co.uk
zed0.co.uk. 600 IN A 137.205.210.240
# dig @8.8.8.8 zed0.co.uk
zed0.co.uk. 506 IN A 137.205.210.240
# whois 137.205.210.240 | grep descr: | head -n 1
descr: Campus network for University of Warwick
Looking forward to seeing your submission :)
EDIT: dns updated:
# dig @mary.ns.cloudflare.com zed0.co.uk
zed0.co.uk. 300 IN A 108.162.198.99
zed0.co.uk. 300 IN A 108.162.199.99
The nameservers they've given me are:
mary.ns.cloudflare.com
paul.ns.cloudflare.com
Hopefully Cloudflare can actually get the pages to load in order to serve them up.
If it doesn't look like solving itself soon I'll look at some better hosting.
(meta: yes, just a simple comment to say its great. Lets not forget to post these as well once in a while)