3 ms·
you could have a form asking for the previous password and the new password... It then checks the previous password against the salted hash and then has the inf
by gommm 16y ago
you could have a form asking for the previous password and the new password... It then checks the previous password against the salted hash and then has the information to compare changes between the old password and new password without having to store anything
- gjm11 16y agoThen you[1] can just alternate between two sequences of passwords: password1, cleverme1, password2, cleverme2, ... [1] Meaning: anyone who wishes to use the service but isn't willing to come up with an unending stream of genuinely different passwords for it.