> Banks don't optimize for security, they optimize for profits. So true, and to them "profits" often means "user convenience" long before "user security". I'v

> Banks don't optimize for security, they optimize for profits. So true, and to them "profits" often means "user convenience" long before "user security". I've talked about it here before so this time I'll just post a link to my story about the time my bank reset all its users' passwords to be equal to their usernames (intentionally!): http://www.blahedo.org/blog/archives/000836.html http://www.blahedo.org/blog/archives/000836.html