Comment by compass_copium

>When a password of 9 or more characters is sent, their buffer is over-run, and it allows you to log in.

Man, computers used to be fun