Single post
Evilham 
(open profile)
Frigging webdevs.
Password input field with a maxlength of 20 (undocumented for the user) and: "onpaste='return preventDefault();'".