@KirinDave @twaddington all this says is, password generation rules (must have.. x) help the attackers a lot and the users, not at all.