Hacker News Reader

"Password cannot "resemble" username or past password" So they're storing passwords in plaintext somewhere then? Otherwise how would they know?

Past passwords can be tested against past hashes.

Not resemblance though surely, only an exact match.