If you have a sec, go take a look this at my Computerworld blog.  It is short, but the issue really annoyed me, and it goes along with my “Security Admin / Manager advice” series.