I posted http://blog.oneiroi.co.uk/passwords/security/something-you-know/passphrase-or-complex-passwords/ let me know you're thoughts esp if you think I got anything wrong!