Monthly password change considered harmful, or at least unnecessary

Spaf has a good argument for why we ended up with the dreaded monthly password change and why it may not be such a good idea in practice.

Security is always dynamic, so I agree. Plus, I hate all these dratted password things for everything.