3 ms·
Have you ever noticed that if you enter a password previously used on a Google account it will tell you "password changed X units of time ago"? That surprised
by leesalminen 10y ago
Have you ever noticed that if you enter a password previously used on a Google account it will tell you "password changed X units of time ago"? That surprised me.
It wouldn't surprise me if they're storing failed attempts at all. More data to feed the machines.
- deleted 10y ago[deleted]
- jlgaddis 10y agoEvery Linux machine knows when you last changed your password, too. $ passwd --status
- emmelaich 10y agoOnly root can do that.
- Dylan16807 10y agoI'm not sure why that would matter, but that's not true. No sudo needed to look up that I set my password on this VM on 2013-10-08.
- emmelaich 10y agoThat was a direct copy'n'paste from a session on centos7. Password age is kept in /etc/shadow, not /etc/passwd. So the passwd command is (needs to be) setuid. Redhat generally limits what setuid programs can do. Probably sensible.