No, _people_ are putting people's passwords at risk ;) That said, I completely agree. Especially sad since Blaine Cook was involved with creating the first Ruby implementation of the protocol, more than a year ago.