The guy who wrote the commonly accepted rules about password security now says they’re bu11$h!t.

You don’t need to use a combination of letters, numbers, and symbols, or change them regularly, says Bill Burr, a former manager at the National Institute of Standards and Technology.

[Robert McMillan/Wall Street Journal]