Comment on *Proceeds to append an exclamation mark*
chiliedogg@lemmy.world 3 weeks agoWe had a system at one of my old companies that with each password change, you couldn’t have any of the same characters that were in your last password (12 character max so it was never impossible to solve), you couldn’t have the same character in the same place as any of your last 10 passwords, or the same character type (letter or number) in the same space as the last password. Also no special characters.
The end result was everyone ended up using a1a1a1a1 for the first password, then 2b2b2b2b, c3c3c3c3, 4d4d4d4d, etc. The draconian password requirements resulted in everyone using the same passwords.
lightnsfw@reddthat.com 3 weeks ago
You know some turd in the IT department was so proud of themselves for coming up with that too.
JcbAzPx@lemmy.world 3 weeks ago
And of course they have to be storing the passwords in plain text somewhere to maintain that history.
StabbingSky@lemmy.zip 3 weeks ago
Storing passwords in plain text not a requirement to have a password history.
JcbAzPx@lemmy.world 3 weeks ago
It is when it’s that specific.
poolcritter@pawb.social 3 weeks ago
In this case, it’s required to store which character was in which place in which password, so if not directly stored in plaintext it could still be trivially solved.