Microsoft says mandatory password changing is “ancient and obsolete” (2019)

Re:Microsoft says mandatory password changing is “ancient an... by eropple on Monday April 19, 2021 @09:59PM (#26869931)

You would have it during the password change if you did old-new-new_again, yeah?

[ Parent | on HN ]

Re:Microsoft says mandatory password changing is “ancient an... by ben0x539 on Tuesday April 20, 2021 @09:35PM (#26884396)

Yeah that was the idea. I guess a lot of apps don't actually do that and just email you password reset links, in which case you can't actually recover the old password. :<

[ Parent | on HN ]

Re:Microsoft says mandatory password changing is “ancient an... by rovr138 on Wednesday April 21, 2021 @08:58AM (#26889041)

This leaks data if a collision can be found and exploited.

Assuming the user uses the password in other places, this can be a bad thing.

[ Parent | on HN ]