Is GCHQ password advice dodgy?
charlieharvey.org.uk