I'll note that the events group that's running the author site for the DoD Cyber Crime conf still thinks it's a good idea to email passwords