the thing is that even if there is a limit about 8 char passwords, it cant be broken by brute force...just the delay of trying each password would need years