Secure Passwords: Breaking a Cryptographic Product

“For years, I have said that the easiest way to break a cryptographic product is almost never by breaking the algorithm, that almost invariably there is a programming error that allows you to bypass the mathematics and break the product. A similar thing is going on here. The easiest way to guess a password isn't to guess it at all, but to exploit the inherent insecurity in the underlying operating system.” - "Secure Passwords Keep You Safer" by Bruce Schneier

May be, now is the time to ditch that insecure operating system?

On a related note, it's amazing to me how many people use insecure passwords and then repeat those passwords for every site they are a member of. Worse, I can't understand sites that still keep passwords in plain text format.