http://www.wimp.com/safecracking/
It's AMAZING what people think is secure.