https://fafait.net/news/1122/One-of-the-oldest-rules-about-passwords-is-totally-wrong