The worst password requirements I've ever seen: must contain a number, must start *and* end with a letter, no special chars. #wtf