Web Insecurity: Amex thinks shorter passwords without special characters are more secure

[terriko]

Another post to Web Insecurity. This one is pretty much explained by the title:

Amex thinks shorter passwords without special characters are more secure

I was working on a background section of my thesis proposal and was talking about how some misconceptions regarding security policies can result in web sites being a lot less secure. But [American Express] takes security misconceptions to a new low...

(Read the rest. And weep. Or laugh. It's pretty terrible.)