2 ms·
You would have it during the password change if you did old-new-new_again, yeah?
by eropple 6y ago
You would have it during the password change if you did old-new-new_again, yeah?
- ben0x539 6y agoYeah that was the idea. I guess a lot of apps don't actually do that and just email you password reset links, in which case you can't actually recover the old password. :<
- rovr138 6y agoThis leaks data if a collision can be found and exploited. Assuming the user uses the password in other places, this can be a bad thing.