• shininghero@pawb.social
    link
    fedilink
    arrow-up
    13
    ·
    1 day ago

    Active Directory by default does not enforce a minimum password age. If you have a good strong one already that you know isn’t compromised, you could just spam 24 password changes as fast as you want and boom. Your old password drops out of the history and can be used again.