They also used to truncate passwords at 8 characters without making that clear to the user. If you are someone who uses a passphrase you might have set your password to "PasswordCorrectHorseBatteryStaple" and entered that whenever you logged in, but anyone could access your account by just entering "Password". I tried on multiple occasions to be escalated to or referred to someone who would care, but no luck.