Ars Technica: 30 years of failure: the username/password combination
“We’ve known for decades that humans have a limited ability to associate passwords with specific accounts, and compensate by using what might be termed worst practices. A new survey of IT users at a large organization shows that little has changed, and the most sophisticated users behave no different than an average one.”


