@robpike Not as bad as when it's accepted but some unsupported characters are silently dropped for unknown reasons.

@robpike my favorites are when forms silently truncate your password to the max character limit length

@robpike fuzzing? Yeah that's my password generator

@robpike That sure is a cumbersome way to spell “rage”.

@robpike Or when your password manager generates a totally random 20 character password but it’s not accepted because it doesn’t have a punctuation mark in.

@robpike I have spent a stupid amount of time debugging JavaScript on other people’s pages so that I can get it to accept a password to create an account I probably don’t really want anyway.

@robpike I smell a regular expression in them there hills.

@robpike bonus points if the validation on the account creation page and login page are different so you can create accounts you can't log into...