Banks are required to make users whole, even if the user's password is compromised. At least for individual accounts. (For businesses the situation is differen

Banks are required to make users whole, even if the user's password is compromised. At least for individual accounts. (For businesses the situation is different.) http://research.microsoft.com/apps/pubs/default.aspx?id=161829 http://research.microsoft.com/apps/pubs/default.aspx?id=1618...