RT @SwiftOnSecurity: When you remote auth to a local account, Windows uses an unsalted, universal hash. Attacker just has to copy and paste…