News for hackers. Stuff that matters.
Re:Zxcvbn: realistic password strength estimation by lowe on Tuesday April 10, 2012 @03:58PM (#3824086)
sounds about right. screenshot of BofA's policy here: http://dl.dropbox.com/u/209/bofa_password_constraints.png

the forbidden list is: $ < > ^ ! [ ]

Re:Zxcvbn: realistic password strength estimation by hbhanu on Tuesday April 10, 2012 @04:33PM (#3824258)
Huh, thanks! I suspected it was a security thing, but I've seen some sites where other non-alphaneumeric characters were disallowed as well. :/ At least this makes some sense.