When Twitter recently had accounts and passwords leaked, many were attached to spam accounts or duplicate records. Most had obvious passwords (like 1234).

Are these legitimate active accounts? Can you do anything with the hashed passwords alone?