password security fail:
I saw this on a financial website today:
New passwords must be between 8 & 20 characters, must contain at least one letter and one number, and cannot contain the following special characters: $ < > & ^ ! [ ]. No spaces are allowed.