>When I changed my password there, not too long ago, it was worse. The "change password" page (I later discovered) silently cropped the long random password I pasted, while the "log in" page required the saved (truncated) password exactly. I don't know how they expected anyone to figure that out

The British Airways site does exactly the same thing, took me about 5 attempts at resetting my password before I realised what was going on...