Yes, you all know that you can use computername\user or 192.168.x.y\user, or even domain\user when logging on to machine.
But, when you want to login as local user and don’t know computer name, and do not want to type IP address, you can use any\user where any can be anything.
Nice little security flaw?