XKCD's Take on secure password generation