微软的 Strong Password 建议：
http://www.microsoft.com/protect/...rd/create.mspx 里面有一项蛮有趣的，原来在特定情况下，空白密码比容易被猜到的密码更安全：
The "blank password" option A blank password (no password at all) on your account is more secure than a weak password such as "1234". Criminals can easily guess a simplistic password, but on computers using Windows XP, an account without a password cannot be accessed remotely by means such as a network or the Internet. (This option is not available for Microsoft Windows 2000, Windows Me, or earlier versions) You can choose to use a blank password on your computer account if these criteria are met:
- You only have one computer or you have several computers but you do not need to access information on one computer from another one
- The computer is physically secure (you trust everyone who has physical access to the computer)
The use of a blank password is not always a good idea. For example, a laptop computer that you take with you is probably not physically secure, so on those you should have a strong password.
