Re: "Don't reuse password" box in Policy Editor

Julian Assange (proff@iq.org)
11 Aug 1998 09:46:12 +1000

• Next message: Bruce Schneier: "Internet is rickety"
• Previous message: Mike Stay: "quantum problem suggestions?"
• In reply to: Mail System Internal Data: "DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA"

Mike Stay <staym@accessdata.com> writes:

> Dos NT keep a list of previously-used passwords somewhere? Or was MS
> bright enough to store just hashes of old pw's?
> --
> Mike Stay

If the hash works in-liu of a password, it may as well be one (although
the hash could be unique to the policy editor for instance, which would
stop exploitation outside that domain).

Julian.

• Next message: Bruce Schneier: "Internet is rickety"
• Previous message: Mike Stay: "quantum problem suggestions?"
• In reply to: Mail System Internal Data: "DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA"