undefined | Better HN

0 pointsmacintux2y ago0 comments

I have long felt that organizations that require password rotation for employees should, when the users are changing their passwords, record and post the old password to an internal site (without any identification of the user) for educational (and mockery) purposes.

0 comments

Thorrez2y ago

That will help attackers. People often make passwords similar to their old passwords. A machine learning model could be trained on this list.

j / k navigate · click thread line to collapse

0 pointsmacintux2y ago0 comments

0 comments

Thorrez2y ago

That will help attackers. People often make passwords similar to their old passwords. A machine learning model could be trained on this list.

j / k navigate · click thread line to collapse