password security fail:

[milktree]

I saw this on a financial website today:

New passwords must be between 8 & 20 characters, must contain at least one letter and one number, and cannot contain the following special characters: $ < > & ^ ! [ ]. No spaces are allowed.