Re: Stupidity of the rules
BTW, this list also points out something else. A bad password isn't just one that is 'simple' or 'easy'. IHatePa$$w0rdsAndWillF0rever! would probably be determined by online checks to be a 'great' password. But if everyone uses it, um, not so much. So uniqueness has to part of the ploy. It never comes up because if passwords are private, how would anyone know if they're unique. Except we know they're not private anymore.
And what about web sites that limit your special character selection? What's up with that? I can't use a '$' or a '%' symbol? Well, I'm not lazy, the programmer is! But somehow it's my fault if my password isn't strong enough.
(And I used one web site that passed the 'no words allowed in the password' rule by literally disallowing the use of any vowel. That's right, your password couldn't contain a vowel!)