Wired News has a story about the lack of security on Bush and Kerry's campaign sites. This isn't that surprising. The interesting thing about campaigns is that they have a hard deadline. You can't slip. That puts tremendous pressure on the campaign to throw up the site quickly and concentrate on content and functionality. Of course, ignoring security is a risk and one that campaign managers are unlikely to understand fully. They'll pay more attention after a candidate is hurt because of poor Web site security.