Password policies are the enemy of security, the developer of a password analyzing tool concludes, while a vendor pushes it further to decree that password security is, basically, toast.