On forced password resets, the NIST guidelines are clear. But alas, this kind of news travel very VERY slowly it seems. Even the large organisations that "care deeply" about security seem to miss the memos. Gets my goat all the time.

Thanks for the real world stories on people who are actually, physically challenged.