Password Change Policies Do Not Enhance Security

In another example of security through "because we say so," there is a recent study that indicates changing passwords does not enhance security. The premise of the argument is that if the bad guy's compromise an account, they will exploit it immediately, rather then hang on to a password for some future use.