15 seconds of physical access and a USB Rubber Ducky is all it takes to swipe passwords from an unattended PC.
