Windows Authentication Protocol Allows Deactivated User Accounts to Live On: Report

Dead doesn’t always mean dead – at least not in the case of Windows user accounts. In an examination of Windows’ implementation of the Kerberos authentication protocol, researchers at Aorato have found that a disabled user account in can remain valid for up to 10 hours after having been revoked. As a result, disabled accounts...