Take the case of one Granick client who used nothing more than a standard Web browser to discover the master password file of one Internet service provider that was not locked away as well as it should have been.
Since it outsources its help desk, each and every call to the service provider incurred a charge, and before long password-reset costs ballooned to millions of dollars.