Since it's just the FBI then I would make it a retraining issue. And the sysadmin with such pathetic password policy should get some ass chewing. Whoever wrot

Since it's just the FBI then I would make it a retraining issue. And the sysadmin with such pathetic password policy should get some ass chewing. Whoever wrote the code that stored these values in plaintext (if that is indeed the case) should definitely get the boot. If this was the NSA or CIA I would fire them all and shoot the person who coded it. :o)