The SilverlightKey that is used to authenticate a user is composed of numbers. A hacker could try to guess the number. They would need to be on the same Class B IP address to do so but it may be possible.
We just checked in code to make a password composed of letters and numbers and the password is now of varying length.
It should be released by December.