The thread on /r/netsec offers some clarification: http://www.reddit.com/r/netsec/comments/1ypdo1/sorry_microsoft_pass_the_hash_on_windows_81_still/ http://www.

The thread on /r/netsec offers some clarification: http://www.reddit.com/r/netsec/comments/1ypdo1/sorry_microsoft_pass_the_hash_on_windows_81_still/ http://www.reddit.com/r/netsec/comments/1ypdo1/sorry_microso... Ostensibly, the vulnerability is necessary to maintain functionality. Something to do with the particular Kerberos implementation and backwards compatibility. They've made it more difficult to get to the point where you can attack, however.