RE: Where are Windows "Enforce password history" passwords stored?From: <Wil.Allsopp () ins com> Date: Tue, 30 Aug 2005 21:59:03 +0100
James Leighe [jamesleighe () gmail com] wrote:
It's stored as a hash, so if you find out how to access them, you
would have to crack it. So basically, it's not worth the time when an
attacker could just go for the current password.
This shows a fundamental misunderstanding of security as well as the way
hackers think. There are many advantages for an attacker to have your
previous passwords - passwords are reused and some may be current on
peripheral or entirely separate systems.