The prowess of these three crackers also underscores the need for end users to come up with better password hygiene. Many Fortune 500 companies tightly control the types of passwords employees are allowed to use to access e-mail and company networks, and they go a long way to dampen crackers’ success.

http://arstechnica.com/security/2013/05/how-crackers-make-minced-meat-out-of-your-passwords