I was setting up access for someone this morning on the US Social Security site for small businesses. They give you an ID and ask for a password. I had to read it twice because I couldn't believe it. Then I took a picture to share here.
The only thing on the list that, to me, shows that someone paid some attention to security at some point is that you can't have all letters or all numbers. Each other item on the list is crazy.
Your government dollars at work :\