So I have a new development box in the office to test build some servers on. You can find it in the machine room because it's clearly labelled "naughty blade". Anyway, it has a moderately easy to remember (and presumably therefore crack) root password. They don't seem to be too worried about this possiblity - as Tom put it No-one can possibly do more damage than Nick.