badpasswordpolicy.org
f: internal use only