Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://infosec.exchange/users/mttaggart/statuses/114428392611677642">Taggart :donor: (mttaggart@infosec.exchange)'s status on Thursday, 01-May-2025 04:52:52 JST</a><a href="https://infosec.exchange/@mttaggart" title="mttaggart@infosec.exchange"><img src="https://gnusocial.jp/avatar/117593-48-20241114173111.webp" width="48" height="48" alt="Taggart :donor:" style="position: absolute; left: 0; top: 0;">Taggart :donor:</a><div><ul><li></ul></div></section><article><p>Since <a href="https://infosec.exchange/@wdormann">@wdormann</a>  is quoted in this piece and I can't find Dan Wade's handle, I'm tagging him in.</p><p>Is this suggesting that the RDP cred cache never gets updated? Ever ever?</p><p>Also what's up with this?</p><p>Old credentials continue working for RDP—even from brand-new machines.</p><p>That makes no sense at all.</p><p><a href="https://arstechnica.com/security/2025/04/windows-rdp-lets-you-log-in-using-revoked-passwords-microsoft-is-ok-with-that" rel="nofollow">https://arstechnica.com/security/2025/04/windows-rdp-lets-you-log-in-using-revoked-passwords-microsoft-is-ok-with-that</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/4981725#notice-9761980">In conversation</a><time datetime="2025-05-01T04:52:52+09:00" title="Thursday, 01-May-2025 04:52:52 JST">about 12 days ago</time> <span>from <span><a href="https://infosec.exchange/@mttaggart/114428392611677642" rel="external" title="Sent from infosec.exchange via ActivityPub">infosec.exchange</a></span></span><a href="https://infosec.exchange/@mttaggart/114428392611677642">permalink</a><h4>Attachments</h4><ol><li><label><a rel="external" href="https://gnusocial.jp/attachment/2215326">Untitled attachment</a></label><br></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Taggart :donor: (mttaggart@infosec.exchange)'s status on Thursday, 01-May-2025 04:52:52 JSTTaggart :donor:
- Will Dormann
Since @wdormann is quoted in this piece and I can't find Dan Wade's handle, I'm tagging him in.
Is this suggesting that the RDP cred cache never gets updated? Ever ever?
Also what's up with this?
Old credentials continue working for RDP—even from brand-new machines.
That makes no sense at all.
https://arstechnica.com/security/2025/04/windows-rdp-lets-you-log-in-using-revoked-passwords-microsoft-is-ok-with-that
In conversationabout 12 days ago from infosec.exchangepermalink
Attachments
1. Untitled attachment

Public

Embed Notice

HTML Code

Corresponding Notice