Also the coincidence of 3 weeks later adding "oh, no passwords above 256 chars" making it easy to trigger