News for hackers. Stuff that matters.

A comment on Microsoft says mandatory password changing is “ancient and obsolete” (2019). Parent comment

Re:Microsoft says mandatory password changing is “ancient an... by pc86 on Monday April 19, 2021 @01:11PM (#26865253)
If users actually selected new passwords maybe. But they don't, they increment the number at the end or change the special character.
[ Parent | on HN ]
Re:Microsoft says mandatory password changing is “ancient an... by Godel_unicode on Monday April 19, 2021 @02:04PM (#26866051)
For those who may not know, password cracking/brute-force tools have all of this logic and more besides.

Whatever human-rememberable algorithm people are using to rotate passwords, if an attacker knows a password they used at any point previously they'll get the new one quickly.

[ Parent | on HN ]