Let's talk about passwords

[Relentless]

Excellent post.

Also, on the paysite owner side, why don't paysites all allow punctuation in passwords? The vast majority of brute force scripts use letters and numerals only. Adding a semicolon or tilde or exclamation point to your password makes it exponentially harder to crack.... yet many paysites don't allow punctuation in usernames and passwords.