More Infosec blogage from me:How Long is Long Enough for a Password? [phoneboy.org]