Security Basics mailing list archives

ENC: Password Pride - A Humorous Vulnerability


From: "Marcus Valsecchi" <mvalsecchi () terra com br>
Date: Thu, 18 Jan 2007 17:34:00 -0200


Try this, just for some laughs. This one is a classic, btw.
Print a sign with this:
"Password creativity (or strength, or whatever suits you) Contest!
We are awarding a *put a prize here* for the *put a number here* most
creative/strong/whatever *desired account type* passwords! Just write down
your login name and password, put it in this box down here, and the prize
can be yours!"

You got the idea. Especially suited for college/high school environments.
Don't try this at home kids.


On 1/18/07, Miguel Valentin <valentinousn () verizon net> wrote:
I would say you just encountered another moron that doesn't belong in the
I/T field!!


lol...
it happnes and it can happen to you as well :-p
next time be carefull when you will talk to someone ;)


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On
Behalf Of andy cuff
Sent: Monday, January 15, 2007 12:26 PM
To: security-basics () securityfocus com
Subject: Password Pride - A Humorous Vulnerability

I thought I'd share a recent observation with the list.

I was in a bar in San Francisco where my English accent has a habit of
stimulating conversation with total strangers, in this case it was with a
webmaster (sadly not webmistress) of a dubious website hosted in Amsterdam
(I
don't think I need to expand on the nature of the site;)  I mentioned that
I

was passionate about Information Security, whereupon, he proceeded to tell
me
his root password, as he was so proud about how hard it would be to crack!
If
this was an isolated incident I wouldn't mention it.  However, these
instances
are becoming ever more frequent, is it my trustworthy face or are others
experiencing similar errors of judgement?

Best Regards

--
Andy Cuff
Computer Network Defence Ltd
www.SecurityWizardry.com








-- 
---------------------------------------
http://www.secgeeks.com
get a blog on secgeeks :)
register here:-
http://secgeeks.com/user/register
rss feeds :-
http://secgeeks.com/node/feed
Submit you security articles,send them to secgeek () secgeeks com

http://www.newskicks.com
Submit and kick for new stories from all around the world.
---------------------------------------


Current thread: