I've seen some shoddy #password validation approaches, but the implementation on the Wills/Probate search service is truly hall-of-shame worthy.