Hate silly password rules? So does the guy who created them

Password rules followed by millions of users for over a decade turn out not to be based on any real-world data.