World Password Day has a ritual quality to it. Another year, another round of reminders about password hygiene. And yet credential-based attacks remain one of the most reliably successful techniques ...