News for hackers. Stuff that matters.
Re:Zxcvbn: realistic password strength estimation by AJ007 on Tuesday April 10, 2012 @04:01PM (#3824101)
Not answering your question, but the most inane thing I've seen is sites that have a password character limit but then don't tell you, and only save the first X number of characters.

There probably is a special level of hell for UI UX sins.

Re:Zxcvbn: realistic password strength estimation by lowe on Tuesday April 10, 2012 @04:41PM (#3824304)
This drives me insane. It especially bites everyone using a a manager to generate long random passwords.

Password fields that are too short cause a similar problem, where you ask "am i still typing? did it cut me off?"

We purposely made the fields huge to help with this on: https://www.dropbox.com/register