Passwords must be all numbers and can be no longer than six digits, meaning there are no more than 1 million possible valid combinations.
Yep. 243931. Go to town.
I read more on the Ars story, and turns out, Virgin Mobile had their login page return Service Unavailable. Which either means they did it on purpose or there is wholesale mining right now. Take your pick.