3 ms·
The one that actually tells you they store plaintext passwords is when it can't be close to previous passwords.
by seaish 7y ago
The one that actually tells you they store plaintext passwords is when it can't be close to previous passwords.
- dfox 7y agoYou can also implement that by just bruteforcing the previous hash with variants of the new password. IIRC Windows since 2000 implement these kinds of checks in exactly this way.
- eru 7y agoThey are some ingenious ways to make that judgement without storing plaintext passwords. But you are right, that none of those companies do that.