you've got a really good point there and on second thought I totally agree with you. I guess I was looking at it from a more "my app"-centric point of view. I

you've got a really good point there and on second thought I totally agree with you. I guess I was looking at it from a more "my app"-centric point of view. I suppose these days, in light of the point you make, if you accept a password from an end-user there is no such thing as a low impact disclosure.