read more
http://feedproxy.google.com/~r/Securityweek/~3/RGXUmDELhkc/most-web-services-dont-care-how-weak-your-password