Password Pride - A Humorous Vulnerability

[andy cuff <lists () securitywizardry com>]

I thought I'd share a recent observation with the list.

I was in a bar in San Francisco where my English accent has a habit of 
stimulating conversation with total strangers, in this case it was with a 
webmaster (sadly not webmistress) of a dubious website hosted in Amsterdam (I 
don't think I need to expand on the nature of the site;)  I mentioned that I 
was passionate about Information Security, whereupon, he proceeded to tell me 
his root password, as he was so proud about how hard it would be to crack!  If 
this was an isolated incident I wouldn't mention it.  However, these instances 
are becoming ever more frequent, is it my trustworthy face or are others 
experiencing similar errors of judgement?

Best Regards

-- 
Andy Cuff
Computer Network Defence Ltd
www.SecurityWizardry.com