
The username/password approach to security on the Web is woefully insecure and in need of updating. Passwords are breached (hello, Gawker), email addresses are stolen (hello, Epsilon), phishing attacks tend to hook the unwary, and then identities are stolen.






