Password validation sucks – but it doesn't have to | Dark Hacker News