real-world passwords

An analysis of a large collection of passwords gathered in a Myspace phishing attack reveals that passwords are getting better, although:

We used to quip that “password” is the most common password. Now it’s “password1.” Who said users haven’t learned anything about security?

Schneier on Security: Real-World Passwords