Nate Anderson set out to crack a single password in less than one day's work. By the end of that day, he had cracked 8,000 passwords. You should read his full report at Ars Technica.