Bad Challenge Response
Good discussion on linux-elitists bashing broken challenge-response systems (or, to clarify “challenge-response systems, which are by definition broken”). Including an excellent explanation of the problem by Karsten Self.
Incidentally, if you don’t know what the Joe Job is, here’s a good definition.