A website complained at me for trying to make a password too long. Their limit is 40 characters. Oh.
@benhamill Whenever I see a length limit on a password field this tells me one thing "we store your password, not its hash".
@evilchili @benhamill I would say it's an inexperienced dev 100% the time. Either so inexperienced, that they think it's a good idea, or so inexperienced, that they didn't say "over my dead body" to the management when it came asking for that. Lack of experience either way.
@benhamill @evilchili Ok, maybe 5% of the time it's the evil haxxors setting up a honeypot.