25
Hackers shoveled snow for company, were rewarded with network admin access (www.theregister.com)
submitted 3 months ago by [M, B] to c/hackernews@lemmy.bestiver.se
3 comments fedilink hide all child comments
 

Comments

all 3 comments

sorted by: hot top controversial new old
[–] 7 points 3 months ago (2 children)

They tried using the password “winter2023!” and got 50 or 60 hits among the employees.

Why did so many employees have this same password? I'm guessing maybe IT used it as a default or something?

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 7 points 3 months ago (1 child)

    When you force users to change password every 90 days, but also don't use anything like a password filter DLL or more modern solution to block obvious seasonal patterns, folks do this.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 3 months ago

    Honestly I really struggle with this. I use a password manager and 2FA for everything I possibly can with completely random passwords.

    But on my work machine for first logging into the OS, what can you do? I have a handful of randomly generated passwords from high school memorized so I usually rotate a combination of those, but I don’t love that either.

  • permalink
  • fedilink
  • source
  • parent