The trouble with "Correct horse battery staple" is if they know you are a fan of XKCD and using a four word password, they can still get you with a dictionary cracking tool.
http://www.reddit.com/r/techsnap/comments/18ezb6/correct_horse_battery_staple_really_a_strong/