February 5, 2007
Study Finds Web Antifraud Measure Ineffective - New York Times
I’ve always suspected that these “Select your image and don’t enter your password if you don’t see it” systems were broken — Asking users to behave differently when something is *missing*, which they’re liable to forget even *existed*, is not security by any stretch.