Bruce Schneier claims that shoulder-surfing isn’t much of a problem these days.
Plenty of people discovered “my password” at NSConference, so I disagree :-) (photo courtesy of stuff mc).
APPropriate Behaviour
The book about all the things software writers do that aren't writing software.
FSF
I can't read your password it's too small… what is it? ;)