Hacker News Reader

this.

I wonder if Microsoft employees (all or portions) have to rotate their passwords due to PCI compliance despite Microsoft's stance on the subject.

Not any more, as of a year or two ago? We finally updated our internal structure to follow the NIST guidelines we helped write.