A password for the Hawaii emergency agency was hiding in a public photo, written on a Post-it...

When I was operations officer for a StratCom communications center, a colonel called me on the phone and insisted reading a portion of a partially garbled TS message to insure that I had the correct one retransmitted. All I needed was the originating command and the DTG. Well, I hung up on him several times but he kept calling back to read more to me. The tape of that incident was featured at the next year's security awareness briefing. I can see this being used in the same way...