7 ms·
On my current contract, we go to great trouble to install whole-disk, multiuser encryption on all laptops. And then we use a trivial default password, as in one
by m0nty 13y ago
On my current contract, we go to great trouble to install whole-disk, multiuser encryption on all laptops. And then we use a trivial default password, as in one of the first few you would try if you were guessing passwords. Tech-savvy people for sure, but lazy, I guess.
- drdaeman 13y agoI believe, passwords, if required to be set to some default value, should be "changeme" or similar variants.
- m0nty 13y agoBut people don't change them unless forced to. Another place I worked, half the passwords were qwerty123 because the tech set them up in the expectation they would be changed. Another place, the passwords were usually "password". I once set up a bunch of accounts for a new domain with strong passwords which I printed on a credit card-sized laminated card, which people could keep in a wallet or purse. Mostly, this worked well, but still some people blu-tacked the cards to their desks or keyboards. It's unwinnable unless you force people to do the right thing.