Bank of Montreal has horrible password policies and does not store them securely (colin.keigher.ca)