clevershark.com
Sometimes more security = less security. - The Clever Shark
Security Myths and Passwords. This should be a must-read for all IT managers... that "change your password every 30 days" policy could well lead to less