News for hackers. Stuff that matters.

A comment on UK becomes first country to ban default bad passwords on IoT devices. Parent comment

Re:UK becomes first country to ban default bad passwords on ... by rolph on Tuesday April 30, 2024 @12:24PM (#40212794)
thats always been a concern for me.

if my past passwords can be examined for comparison with a current one, i cant shake the idea that no password is secret under such a regime

[ Parent | on HN ]
Re:UK becomes first country to ban default bad passwords on ... by bdavbdav on Tuesday April 30, 2024 @01:40PM (#40213680)
This is still compatible with one way hashing. The service just sits on the recent hashes. They’re still non reversible.
[ Parent | on HN ]
Re:UK becomes first country to ban default bad passwords on ... by rolph on Tuesday April 30, 2024 @01:48PM (#40213813)
yes, we have to trust it is done like that, as a standard.

i suppose an "evil admin" has a lot of other ways to harvest passwds, rather than one that is a major security problem.

[ Parent | on HN ]