I have encountered that our linux system cuts the length of every password to a certain length, after that length every additional character seems to be ignored.
Does this make our linux system more succeptible to a brute force dictionary attack? Also the length of a password at work isn't 100% a secret, as you will hear someone typing either shortly or quite long. Could someone with malicious intent use this to crack a long password with a dictionary attack of common words, by assuming all complicated characters are at the end?