Comment on *Proceeds to append an exclamation mark*
chiliedogg@lemmy.world 3 days agoWe had a system at one of my old companies that with each password change, you couldn’t have any of the same characters that were in your last password (12 character max so it was never impossible to solve), you couldn’t have the same character in the same place as any of your last 10 passwords, or the same character type (letter or number) in the same space as the last password. Also no special characters.
The end result was everyone ended up using a1a1a1a1 for the first password, then 2b2b2b2b, c3c3c3c3, 4d4d4d4d, etc. The draconian password requirements resulted in everyone using the same passwords.
lightnsfw@reddthat.com 3 days ago
You know some turd in the IT department was so proud of themselves for coming up with that too.
JcbAzPx@lemmy.world 3 days ago
And of course they have to be storing the passwords in plain text somewhere to maintain that history.
StabbingSky@lemmy.zip 3 days ago
Storing passwords in plain text not a requirement to have a password history.
JcbAzPx@lemmy.world 3 days ago
It is when it’s that specific.
poolcritter@pawb.social 2 days ago
In this case, it’s required to store which character was in which place in which password, so if not directly stored in plaintext it could still be trivially solved.