Passwords Are Not the Bottleneck...

Fascinating paper by a pair of Microsoft researchers, arguing that the poor technical merits of passwords on web-based financial accounts really aren't the problem to tackle.  I learned all sorts of things about the “business” of stealing passwords on reading this paper...