> This only proves they aren't encrypting passwords on the fly. And have, and do, the ability to read your password.
Not at all. They could simply be checking against rules before hashing the password. Pretty much any passworded system already does this in order to enforce minimum length rules.
Password length rules are enforced at form submission time, before the account is opened - whereas the twitter post says the account was opened, then permaclosed.
If that's their password length checker, they've got the maddest password length check design I've ever heard of.
Not at all. They could simply be checking against rules before hashing the password. Pretty much any passworded system already does this in order to enforce minimum length rules.