Exposed: the great password scandal By Paul Annett published 3 May 09 You wouldn't let your bank give your PIN to a stranger, but some sites are taking a similarly cavalier attitude to security