The "chocolate" survey was hardly scientific. I suspect that a large number of people would have given completely fictitious passwords in exchange for the free chocolate. We, IT Security Pros, can hardly use this survey as the basis for a password campaign. The business people would, rightly, dismiss us out of hand. The issue of password secrecy is very real, using flawed research won't help us to addresss the issue.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/245/26471#26471