Finally someone with credibility who states that regular password changes are pointless, and may even reduce security. It's even backed by scientific publications from Microsoft.