Windows RDP lets you log-in using revoked passwords. Microsoft is ok with that via
@afAndrew https://lobste.rs/s/rnoykc #security #windows
https://arstechnica.com/security/2025/04/windows-rdp-lets-you-log-in-using-revoked-passwords-microsoft-is-ok-with-that/
If you have a fediverse account, you can quote this note from your own instance. Search https://mastodon.social/users/lobsters/statuses/114430044699098914 on your instance and quote it. (Note that quoting is not supported in Mastodon.)