Oh, I completely agree, nothing is ever a panacea. But there is a difference between a security incident and a fundamentally broken system. And I believe that t

Oh, I completely agree, nothing is ever a panacea. But there is a difference between a security incident and a fundamentally broken system. And I believe that the current password systems are fundamentally broken in at least 2 ways: (1) The permanent nature of the password, as opposed to one-time use (a three-month limit changes little). (2) The current system relies on assumption of certain user behavior - picking true high entropy passwords - which is just.not.going.to.happen. The lectures we give users on how they are living in sin are about as likely to change anything as the programs to educate "the new Socialist man".