News for hackers. Stuff that matters.

A comment on Sites with dumb password rules. Parent comment

Re:Sites with dumb password rules by seaish on Friday September 06, 2019 @03:52AM (#20893840)
The one that actually tells you they store plaintext passwords is when it can't be close to previous passwords.
[ Parent | on HN ]
Re:Sites with dumb password rules by dfox on Friday September 06, 2019 @05:40AM (#20894285)
You can also implement that by just bruteforcing the previous hash with variants of the new password. IIRC Windows since 2000 implement these kinds of checks in exactly this way.
[ Parent | on HN ]
Re:Sites with dumb password rules by eru on Friday September 06, 2019 @05:58AM (#20894353)
They are some ingenious ways to make that judgement without storing plaintext passwords.

But you are right, that none of those companies do that.

[ Parent | on HN ]