The program could be used by anyone who knew the password, and he had picked an especially weak one: "pos, " a common nickname for the cash-register software that was also the system's user name.
WSJ: Hackers New Target: Small Firms With Lax Security