Graham reports on his tests of systems across the University and the news isn't great, particularly on the password front. Apparently we still have work to do in getting the message across. We also do our usual trawl of security news inside and outside the University.