Hacker News Reader

Are they actually using all that password length, or are they just allowing people to enter long passwords and truncating them?

I've used a system at work that truncates passwords when setting them, but not when checking them. It doesn't fill me with confidence.