I wonder it who designs those rules, in general, notices that when you require "at least one Uppercase" people will just press shift for the first letter, and w

I wonder it who designs those rules, in general, notices that when you require "at least one Uppercase" people will just press shift for the first letter, and when you require "one number" people will suffix or prefix the password with the number "1" [0]. And I don't know how that would increase security. [0] for example: http://www.the-interweb.com/serendipity/index.php?/archives/94-A-brief-analysis-of-40,000-leaked-MySpace-passwords.html http://www.the-interweb.com/serendipity/index.php?/archives/...