> And even if you've built a really secure system all it takes is one user with their daughter's name as their password to make it all moot. If your security d

> And even if you've built a really secure system all it takes is one user with their daughter's name as their password to make it all moot. If your security design allows anyone to SSH in to obtain significant system access using only a user selected password, it isn't "really secure."