I have been bitching about stupid password systems for years. Now finally someone has come close to what I would consider a good system: http://itservices.stanford.edu/service/accounts/passwords/quickguide
The only thing I dislike about it is that actually recommending dictionary words for the very long passwords essentially (assuming most people follow this) reduces this to words of length three to six of an alphabet the size of the dictionary. Assuming that a lot of words are much more likely to be chosen than others this may not be as big as it first seems.
