On: Who need XSS when you can simply ask?

[jaaron]

I use Chinese pinyin phrases, then substitute some numbers for good measure. Example:

The phrase: "How are you" is 你好吗？ Romanized, that becomes ni3 hao3 ma3. So a password might be ni3hao3ma3 or n13h403M43.