Passwords, right? If they’re too weak, they can be worse than useless – but making them too strong means people do dumb things like writing them down or forget them and piss off IT workers with frequent reset requests.
http://www.theregister.co.uk/2014/12/10/rip_password/?mt=1418232666937