549
NIST proposes barring some of the most nonsensical password rules
(arstechnica.com)
This is a most excellent place for technology news and articles.
Minor note: 64 unicode characters is potentially much more than 72 bytes.