538
NIST proposes barring some of the most nonsensical password rules
(arstechnica.com)
This is a most excellent place for technology news and articles.
You need to first understand the grand structure of the doc, then cherry pick the content to action points. At least that's how I do it.