AOL lets users choose a password up to 16 characters long, but it actually only reads the first 8. So if you had a password like jonsmith34!@, AOL wouldn't have cared about any character after the 'h'. AOL might as well just be encouraging its last 10 users to use the word password as its password.
Security Fix's Brian Krebs ran the story down following a tip from a reader.
