Villiage Idiots

Just come off a call with a security specialist who wanted my advice on Unix password security. Apparently a live sys admin's idea of good security is "The old passwords will be removed and password set to the username with a blank password."


Why do we bother?