Password validation sucks – but it doesn't have to | Hacker News Reader