Frederick Posted March 4, 2012 Share Posted March 4, 2012 Top 10 Worst Passwords: 123456 12345 123456789 Password iloveyou princess rockyou 1234567 12345678 abc123 Please dont tell me you have got one of these ! Link to comment Share on other sites More sharing options...
woolybanana Posted March 4, 2012 Share Posted March 4, 2012 I have them all. It does take some time to log in!! Link to comment Share on other sites More sharing options...
Quillan Posted March 4, 2012 Share Posted March 4, 2012 Letmein, administratrs password to Sage accounting systems, very few people ever change it. Link to comment Share on other sites More sharing options...
Pommier Posted March 4, 2012 Share Posted March 4, 2012 I have to own up that when I was working and the password had to change every month (and not to the previous month's password) mine was the first three letters of the month, followed by the year. I don't think it was just me either! Link to comment Share on other sites More sharing options...
Quillan Posted March 4, 2012 Share Posted March 4, 2012 Both Novell and Microsoft had/have policies that allowed the system administrator to set how frequently the password should be changed and how many characters it had to be, both could/can also say what hours you can log in to the system (say only between 09:00 and 17:00). The problem would be the company boss's who would hardly use a computer themselves, their secretary did everything, and they thought it too complicated to create new passwords so asked for that option to be turned off. We would always argue that the physical servers and software where small fry (and of course insured) where as data is priceless and one should always protect it. Link to comment Share on other sites More sharing options...
tinabee Posted March 4, 2012 Share Posted March 4, 2012 It's the security questions that drive me mad - gone are the days of "mother's maiden name?" - too easy. I recently had the choice of:Father's middle name? he didn't have oneMother's first name (must be 8 characters or more)? Ivy!!!!!!!!!Name of first pet? never had oneFavourite restaurant? don't have oneFavourite cartoon character? oh for goodness sake [:'(] Link to comment Share on other sites More sharing options...
Jo Posted March 4, 2012 Share Posted March 4, 2012 Even worse are the secure codes you have to use with certain credit cards, I always forget it[:$] it's more than I can do to remember the password I use[:-))] so I have to log in each time and create a new one, fine, but it won't let you use one you had before[blink][blink] I'm fast running out of various aunts maiden names[:-))][:-))] Link to comment Share on other sites More sharing options...
Gyn_Paul Posted March 17, 2012 Share Posted March 17, 2012 [quote user="Pommier"]I have to own up that when I was working and the password had to change every month (and not to the previous month's password) mine was the first three letters of the month, followed by the year. I don't think it was just me either![/quote]That sound horribly like the BBC. I could never get my head round why the system was entirely safe on day 27, but so insecure as to need everybody to change their password on day 28.I discovered that - although there was a minimum number of characters - there appeared to be no maximum number, so I just added words. So what started as 'summertime' ended up as 'summertimeandthelivingiseasyfisharejumpingandthecottonishigh'And we all recognize the workings of 'the law of unintended consequences', whereby after about month 5 no sane human can remember the damned thing so you write it on a post-it and stick it to the side of the monitor. Sorted ! Frequent changes make a system less secure, not more. p Link to comment Share on other sites More sharing options...
Théière Posted March 17, 2012 Share Posted March 17, 2012 What's wrong with ******** [;-)] Link to comment Share on other sites More sharing options...
AnOther Posted March 18, 2012 Share Posted March 18, 2012 My admin PW for our main system is long and needs changing every 90 days but I was told early on that all I actually had to do was tag the month and year on the end and change that so the current ********************0112 will shortly become ********************0312 then 3 months later ********************0612, and so on.The daftest system I have come across recently is one where you are forced to change the PW every 28 days, usual stuff, minimum length, combination of upper and lower letters numbers and characters, yet once you have changed it and logged back in you can immediately change it back to what it was !Another system recently installed has it's long and complicated PW printed on dymo tape and stuck to the keyboard.Another 3rd party system has multiple logins for different levels of access and when it was installed the vendor gave me a print out of them all which I have to use on a regular basis when somebody from the company comes out to work on it either without having been given them at all or not the ones he need to do whatever it is he needs to. Link to comment Share on other sites More sharing options...
PaulT Posted March 18, 2012 Share Posted March 18, 2012 At work I am the administrator of one of our systems. You can set others up as administrators and give them passwords that they can change. However, there is a super administrator login that is needed for certain tasks and the username and password is set. This means I could go to anywhere else where the system is installed, login with the super admin username and password and have fun [6]Paul Link to comment Share on other sites More sharing options...
Stis Posted April 14, 2012 Share Posted April 14, 2012 IMO, forcing a user to change password is a major security flaw - I had a near uncrackable one for Paypal but after several forced changes resorted to writing it down, lest I forget it :-(Stis Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.