Most Cisco gear I've worked on (not ISP level) is extremely susceptible to local "attacks". I've never seen "disable-password-recovery" turned on in a config, a

Most Cisco gear I've worked on (not ISP level) is extremely susceptible to local "attacks". I've never seen "disable-password-recovery" turned on in a config, and I've gone in and changed the CONFREG values dozens of times in order to grab an old config which no one knew the password too. I always assumed that Cisco kind of passed off physical security to the owners of the equipment, which actually made some sense to me, as long as the users were aware that the device wasn't physically secure.