Damn, even worse than I thought. I wish someone would show this to the people who set those ridiculous password requirements.

I was glad when my work did away with monthly password changes and went with 15 characters minimum as the only requirement.