You'd Think MIT Would Be More Secure (libraries.mit.edu)

Sure, they do IP Address filtering on the actual login process, but still...