Re:Don’t design like a programmer (2010)
by nucleardog on Thursday April 14, 2016 @05:34PM
(#11500520)
I'd go so far as to say "especially banks".
Banks, credit card companies, insurance companies, and other places like that are the only time I usually run into the "4-6 characters, no symbols" type restrictions.
A disturbing number of sites (even banks) put limits on the size of a password which tend ot make me think they're storing it somewhere plaintext...