The second piece of advice has to do with password composition, the idea that a good password is longer, contains letters and numbers, and has special characters.
In addition, you should consider avoiding plaintext-password network services: The POP3, FTP, and Telnet daemons pose a special risk because their passwords pass unencrypted across the open network, sniffable by any nearby machine along the way.