Skip to main content
Information Security

Return to Question

Credit SW. Slight readability edits.
Source Link
Michael come lately
Michael come lately
  • 3k
  • 2
  • 27
  • 43

SupposedlyAccording to SecurityWeek, Microsoft is banning common passwords,, and their listthey will dynamically update their list:

Microsoft says it is dynamically banning common passwords from Microsoft Account and Azure AD system. […] Microsoft is seeing more than 10 million accounts being attacked each day, and that this data is used to dynamically update the list of banned passwords.

Is this list based on actual passwords passwords for other people's accounts, or just passwords used in brute force attempts?

Could a secure system be built that checked password updates against other people's existing passwords and rejected themthe update if athe password was too common?

Supposedly, Microsoft is banning common passwords, and their list will dynamically update:

Microsoft says it is dynamically banning common passwords from Microsoft Account and Azure AD system. […] Microsoft is seeing more than 10 million accounts being attacked each day, and that this data is used to dynamically update the list of banned passwords.

Is this based on actual passwords for other people's accounts, or just passwords used in brute force attempts?

Could a secure system be built that checked password updates against other people's passwords and rejected them if a password was too common?

According to SecurityWeek, Microsoft is banning common passwords, and they will dynamically update their list:

Microsoft says it is dynamically banning common passwords from Microsoft Account and Azure AD system. […] Microsoft is seeing more than 10 million accounts being attacked each day, and that this data is used to dynamically update the list of banned passwords.

Is this list based on actual passwords for other people's accounts or just passwords used in brute force attempts?

Could a secure system be built that checked password updates against other people's existing passwords and rejected the update if the password was too common?

Tweeted twitter.com/StackSecurity/status/735922250218672128
Source Link
Michael come lately
Michael come lately
  • 3k
  • 2
  • 27
  • 43

Does Microsoft's "Password Ban" list insecurely store user passwords?

Supposedly, Microsoft is banning common passwords, and their list will dynamically update:

Microsoft says it is dynamically banning common passwords from Microsoft Account and Azure AD system. […] Microsoft is seeing more than 10 million accounts being attacked each day, and that this data is used to dynamically update the list of banned passwords.

Is this based on actual passwords for other people's accounts, or just passwords used in brute force attempts?

Could a secure system be built that checked password updates against other people's passwords and rejected them if a password was too common?