Password Incentives

Really good post over at Episteme on incentives for passwords.

In the DCS world there is almost no belief that anyone will ever be able to see systems let alone try to connect to them. When this misconception is combined with the difficulty (or for many systems the impossibility) of implementing access controls it is easy to see why there is so little protection in place.