I would hope ppl here aren't that stupid.

Best advice I can give is for the username, not the password (well, both, actually). Add punctuation! My gmail account and my dad's account via his cable provider both have at least one punctuation mark in the user name, and neither get ANY SPAM WHATSOEVER!

Tho it's probably too late to change your user name, at least change your password to include at least one punctuation mark somewhere. You'll still get spam (cuz you don't need a password to send spam to a username), but it should help against hack attempts...