Schneier on Choosing Passwords

Bruce Schneier had an interesting post to his blog today about choosing passwords. Schneier has always challenged the conventional wisdom about how passwords are currently used. On the other hand, in some of his posts, he's agreed with critics of such things as two-factor uthentication.

What I like about Schneier's view of the security world is that he really understands the people side of the equation. He came from a hardcore techie background as a cryptographer but has gone beyond that to see the non-technical aspects of both IT and physical security.

A lot of his stuff too is just plain common sense about security.