Originally posted by: Commodus
It's true that the user is ultimately responsible - however, part of the problem is that until XP SP2, Windows was setup such that the user was rarely aware of that responsibility. To this day, new user accounts in XP are created as password-free admin accounts - and admin in XP means you virtually never have to authenticate for anything. Apple might have borrowed security policies from FreeBSD, but it still remains that you must have a password in OS X, and that you'll be asked for it for some actions even if you have an admin-level account.
If you don't have a password set in XP no one can connect to that machine remotely using the un-passworded account.
