I know a financial website (holds people’s money) that enforces a short login password and disallows symbols in it. I wonder if there’s a regulator I can report them to. Though I wouldn’t expect a financial regulator to give a monkey's…
I wonder if some outfits do this because they’re trying to reduce the number of people who go 'Waah! Waah! I can’t remember the fancy password I devised!' You’d think the forgot password links would take care of that though, so it’s probably something else. Maybe their I.T. managers are old boys who learned their trade in the seventies.