https://blog.kamens.us/2009/09/29/password-security-hall-of-shame/