When I recently called United Airlines customer service, they asked me for the first five characters of my password as verification! If this doesn't strike you as odd, I will explain why this is a security failure from both a user experience standpoint and a technical standpoint, and why it