3 ms·
All of those seem fine, except for "what last password do you remember", which is horrifying.
by cballard 11y ago
All of those seem fine, except for "what last password do you remember", which is horrifying.
- Diederich 11y agoWhy? I suspect that just means that they keep the various versions of your hashed password. Some regulatory requirements mandate that passwords not be re-used for a period of time; that would be enforced the same way.
- Nadya 11y agoYou're thinking of the wrong attack vector/issue with this. Imagine your account was compromised. You reclaim your account. The previous cracker recovers your account from you because they knew your previous password and went through the recovery process. The above happens more often than you might think.