passwords...

My mortgage company's website has a really stupid password vetting scheme:

I picked out a great password, with funny characters, bad spelling, and other stuff. But their website rejected it becauase:

The password may not contain any of the following characters: ", ~,!, @, #, $, %, ^, &, *, (,), +, =, \, |, {, }, [,], <, >, ?, blank or tab.

Grrr... that's stupid, what kind of authentication are they running that can't handle weird characters in passwords? so I came up with a nice long, multiple word password based on crap sitting on my desk.

Password must have at least one alpha and one numeric character.

I really wonder how much they get everything else right when they don't get simple stuff right.