I have had a slashdot password for many years; the password was "mary-can". Now Slashdot tells me that it has expired (true!) and I must pick a new one. I have a similar password that I use in many places on the Internet - low security, not my bank! But you do not allow special characters in the password. You alone! Everyone else is happy with this password. So I had to make up a password which I will NEVER remember just to satisfy your crabby filter. Why do you insist on extremely low security passwords? Every expert I've ever heard recommends putting special characters into the password.
By the way, within an hour I'll forget this new password and have to say "I forgot" every time I ever have to log into Sourceforge.
(By the way, I am logged into Slashdot but when I tried to report a bug it insists I log into Sourceforge also.)