Hacker News Reader

> Attackers were not able to view previous account passwords, as those are not stored in plain text or available through the tools used in the attack.

I feel stupid for just realizing that social media account save previous passwords? How far back does it go?

View on HN

Probably just the old hashes to prevent a user from reusing the last N passwords.

If you know the value of N (from UI errors trying to reuse one) and want them to get rid of an old hash for some reason then you could reset your password N times.

Reply on news.ycombinator.com