Recently I saw the following screenshot on [Twitter](https://twitter.com/tedworthy_/status/751365313149726720), describing a obviously terrible password policy:

[![bad password policy](https://i.stack.imgur.com/sfwIh.jpg)](https://i.stack.imgur.com/sfwIh.jpg)

I wonder what is worse for the password strength. Having no password policy at all or a poor password policy (like described in the screenshot)?