Yes, it’s a fact that people are not good at coming up with good passwords. Some administrators, security people, and such try to improve the sitatuation by providing the users “help” with coming up with good, strong passwords in the form of password rules. What those guys often forget, is that people are just that – people, and not computers. It all ends up in insanity, like Jeremy Zawodny talks about in his blog entry.
Of course, the classical source of enlightenment on this subject is the Center for Password Sanity..