Apple
Large-scale hacking attacks -- big enough to almost push the Twilight saga clean off the top 40 best-selling book apps list -- are never a laughing matter, but we don't know yet whether the culprit was a server break-in or simply a bunch of easily guessed passwords. My money is on the latter, though. It's drop-dead easy for a determined cracker to whip up a brute-force guessing attack on some commonly chosen but easily guessed password patterns.
My own Gmail account was accessed from Croatia a few months ago and started spewing out spam under my name; Google
In this day and age of increasingly ubiquitous network access, data storage in the cloud, and everything-as-a-service, it would behoove the big names in Cyberspace to ask a bit more of their users. From Google to Apple to Facebook and Twitter, everybody asks for a password but none of them force you to make it particularly good. They all hint at ways to improve your security, but there is no enforcement. Passwords are generally not a very good solution to the problem of computer security, but it's the de facto standard.
Drawing a squiggle on the screen is arguably more secure, but only works on touchscreen gadgets. Fingerprints and retina scans are perhaps too personal. I think it's time for Symantec
Apple probably wishes for a better practice right now, but there wasn't one available last time I checked. Or did I miss the silver bullet flying by? Please correct me in the comments below and then let your favorite online business in on the secret, too.