http://arstechnica.com/security/2016/05/if-microsoft-is-banning-stupid-passwords-why-does-it-still-allow-paw0rd/