https://www.siliconrepublic.com/enterprise/password-security-bill-burr
Father of long-held security rule declares current passwords ‘invalid’