RT @troyhunt: HSBC: “Customers can enter additional characters on their password and it be accepted as a successful logon. We don’t classif…