Passwords have been compromised before by being captured in server logs that ended up being accessible. If you are logging failed password attempts anywhere, t

Passwords have been compromised before by being captured in server logs that ended up being accessible. If you are logging failed password attempts anywhere, then you've got a security hole. Here's the details on the breach I'm talking about http://ieeelog.com/ http://ieeelog.com/