Andy admitted on his blog that his password was easy - and he acknowledges that wasn't very smart.
But I'm sure you'd agree that's barely tangential to the situation.
Yes, if what Naomi is saying is true (and I think I believe her), it doesn't seem that she used any private UT info - she just took a guess that Andy's user ID and password were the same.
Actually, of all the things that surprise me, the fact that she told a friend about it, was the biggest shock to me.
Kevin