Every once and awhile we get an item like this where one of the big guys reveals that all along, they have been doing something that is either counter intuitive or just plain stupid.
I hope this isn't true, but I have a sneaky feeling that it is.
I knew domain names couldn't be longer than 15 Characters, but passwords!
Thanks to InfoSecurity
Infosecurity - What is Microsoft doing with Hotmail passwords?