The timecard website of a recruiting company I worked for briefly last week has a message on it that suggests using Internet Explorer 6, and the page you access to change your password is not secured with SSL. You would think that a technical recruiting company would be more on top of things than that.