Security Only as Good as People who use them (Score 1)

The premise of the study being people enter the passwords even if they do not see the image is dumb. That's like saying I buy top of the line RSA encryption but provide other my key or i buy a safe and do not lock it. If people are stupid enough to enter passwords on public terminals without even using the most primitive security systems they deserved to be robbed. The BOA system is primitive but depends on people using some common sense. Having said that, I am not big fan on captcha like security systems, install a trojan monitor the images for a month, ship it back to mother ship and lo behold you have a phishing site personalized just for you.