Agreed. As far as I know my password has been "stolen" once in my life -- and that was due to a compromised shell at my ISP. And that's the kicker: _as far as I know_. All the other times (should there be any) I just wouldn't know because I didn't care.

And now that I read back my comment, it kind of looks as if I was just trying to take a cheap stab at your comment. It wasn't the case. I genuinely spent a moment to think about whether there would be a viable solution to the problem at this level. :) Now, getting rid of passwords altogether...

(I dislike people who say you can't solve this -- and here I go doing it myself!)