If you operate a website where your users log in with a #password, please check something for me. Does your website silently truncate the password field? Even better, does it silently truncate to X characters when signing up, Y characters when resetting a password, and Z characters when actually logging in? If the answer to either of those questions is yes, please fix it.