News for hackers. Stuff that matters.
Re:Password expiration is dead, long live passwords by scarface74 on Monday June 03, 2019 @07:35AM (#20082113)
Even if you don’t want users last 10 passwords to be “similar” (by whatever your definition of similar is), you can still hash the similar variants when you hash the original and check them.

I’m not saying whether this is a good idea or not. I haven’t thought through it.

There are no comments on this comment yet.