Ask HN: Is hotmail.com/outlook.com storing passwords in clear text?

https://news.ycombinator.com/item?id=5814005
by xriddle • 13 years ago
1 5 13 years ago

When you have to reset or change your hotmail/outlook password you can not use a previous password or a variation of it. I can understand not using the exact same password and checking it against a previously stored hash, but how can they know a various of my pass without storing it in clear text? Example if I user QWERTASDFG as my pass they will not allow QWERTASDFG!@#$% as my reset pass? The hash for these 2 passes would be completely different so how do they pull this off.

Related Stories

Loading related stories...

Source preview

news.ycombinator.com