Earlier last week, the mighty Joshua Kaufman brought my attention to Jakob Nielsen’s latest alertbox about removing masks from password fields. This sparked some interesting debate, and it got me thinking again about passwords and security in general. It has often seemed to me that the first mistake people tend to make in applying security…