this is a custom website that belongs to our university, so my assumption was that they're
plaintext offenders. So I used a throwaway password anyway, I was just curious whether my prejudices were right. Especially since they want me to give a password that's at least 8 characters long with both lower and uppercase letters and numbers...it would be typical of such pointlessly draconic rules to be coupled to awful
real security measures