Apropos of Bruce Schneier’s recent post on passwords, this post (and the comments below it) from Robert Hensing of Microsoft’s PSS Security Team on why passphrases are preferable to passwords (hint: it’s about key length).

In a related post, David Fraser reminds us to change default passwords, and links to two sites that illustrate why you’re plain nuts if you don’t do this …