Comment by jrodthree24

My company just fixed this. By requiring you to change your password by more than the last character. Really cutting edge security here.