Comment by sshine

Password character limits are important.

They reveal that the back-end service probably doesn't hash the passwords, which is a good time to GTFO.