Most people consider password security a non-problem (see http://news.bbc.co.uk/2/hi/technology/3639679.stm http://news.bbc.co.uk/2/hi/technology/3639679.stm ).

Most people consider password security a non-problem (see http://news.bbc.co.uk/2/hi/technology/3639679.stm http://news.bbc.co.uk/2/hi/technology/3639679.stm ). Should we stop caring about XSS? Or passwords being stored as plain text?