News for hackers. Stuff that matters.

A comment on Let them paste passwords. Parent comment

Re:Let them paste passwords by Osiris on Thursday May 18, 2017 @08:41PM (#14372244)
That's unnecessarily complex. Just ask for the old password when doing an expiration reset. Validate the old one then compare that against the proposed new one.
[ Parent | on HN ]
Re:Let them paste passwords by joshvm on Friday May 19, 2017 @05:41AM (#14374085)
Actually, that's a very good point - you did indeed have to submit the old and new passwords. I want to say that they checked against older passwords too, but I might be misremembering.
[ Parent | on HN ]
Re:Let them paste passwords by gpawl on Friday May 19, 2017 @01:22PM (#14377684)
That doesn't help. Your new password might be the same as the twice-previous password.
[ Parent | on HN ]