RE: WinNT and previously used passwords

["Keith T. Morgan" <keith.morgan () terradon com>]

> -----Original Message-----
> From: Seymour, Keith [mailto:KESeymour () magellanhealth com]
> Sent: Tuesday, May 28, 2002 1:40 PM
> To: 'KF'; vuln-dev () security-focus com
> Subject: RE: WinNT and previously used passwords
<snip>
> One the rights to read from the Reg Key might be easier to 
> gain for the old
> passwords.
<snip>
Good point.  Has anyone located where these are stored?  My guess is that they're actually stored in 
the SAM data files.

>  
> Two if you are like 'most' people you start with 1st password 
> Tiger then at
> the next change you change to tiger01 etc. Which is easier to break?
<snip>

Another thing to consider is that people use the same password on multiple systems.  Getting at previously used 
passwords would give you ten options that may *very* well gain access to some other system in the enterprise.