I used to use the model number of my Monitor, or the model for an obscure piece of telephony equipment, which I happened to have sitting on top of my monitor.
I did this once, until I realized that from then on, I'd be trying monitor model numbers as passwords to other PCs... and that if I thought it was clever, someone else would too, and it'd come back to haunt me...
I worked for a government department once where, for about the first year or so after they installed office-level servers and PCs, every corporate-level account name and password was the three-letter department acronym.
"Hey, I feel like accessing something high-level today. But I don't have the password for it."
"Yes, you do."
At the time, when I landed a job which did need access to various things, it led to me asking a lot of people what the account/password combo for X, Y or Z was. If they simply stared at me sadly for about three seconds, it meant that yep, the answer was exactly what I dreaded it might be.
IBM blade servers (and some others I think) have an additional password of something like ADMIN and PASSWORD. Although I'm sure this is something you can change / disable, one of my major customers definitely hasn't done this yet.
Seen that done at a bank... mind you, they were using a 486 PC running a mosaic emulator under 95, to access this ancient DEC10 mainframe.. so it was probably secure by being obscure.
The depressing thing is, that was the accounts master database! It was so 'business critical' that they couldn't take it down to replace it.
Default profile... common to virtual every windows/IBM machine, and usually nobody bothers to do anything about it. [and then people worry about haxxors finding obscure exploits in arcane bits of code.]
no subject
Date: 2008-12-29 04:41 pm (UTC)no subject
Date: 2008-12-29 04:58 pm (UTC)no subject
Date: 2008-12-29 05:00 pm (UTC)I once changed a customers password to Cupholder5 because they called in every day for a week for a reset...they kept forgetting the password.
postit. That's awesome!
My favorite strong password of all time is 4Dumba$$
Meets all requirements. LOL
no subject
Date: 2008-12-29 05:04 pm (UTC)With the type of data we're working with here, these people should be tasered every time they try to use a stupid password.
no subject
Date: 2008-12-29 05:10 pm (UTC)36512 different combinations)?perfectly secure!
edit: in other news, how is 'combinations' not in Firefox's dictionary?
no subject
Date: 2008-12-29 05:24 pm (UTC)no subject
Date: 2008-12-29 05:25 pm (UTC)I have no words.
Date: 2008-12-29 07:12 pm (UTC)no subject
Date: 2008-12-29 08:13 pm (UTC)Me: "Hey, what's the pass to the [function] server?"
Sup: "[function]admin for username, [function]password for password."
Me: "You...you're kidding, right?"
Sup: "Nope. We don't log into it often enough to remember what it is, otherwise."
Me: "*sobs silently and cleans up resumé*"
no subject
Date: 2008-12-29 08:50 pm (UTC)no subject
Date: 2008-12-29 08:52 pm (UTC).....
....wow.
no subject
Date: 2008-12-29 09:19 pm (UTC)no subject
Date: 2008-12-29 09:20 pm (UTC)no subject
Date: 2008-12-29 09:23 pm (UTC)no subject
Date: 2008-12-29 09:24 pm (UTC)no subject
Date: 2008-12-29 09:25 pm (UTC)no subject
Date: 2008-12-29 10:02 pm (UTC)...
...
Pass the vodka.
no subject
Date: 2008-12-30 02:18 am (UTC)no subject
Date: 2008-12-30 02:23 am (UTC)"Hey, I feel like accessing something high-level today. But I don't have the password for it."
"Yes, you do."
At the time, when I landed a job which did need access to various things, it led to me asking a lot of people what the account/password combo for X, Y or Z was. If they simply stared at me sadly for about three seconds, it meant that yep, the answer was exactly what I dreaded it might be.
no subject
Date: 2008-12-30 06:03 am (UTC)no subject
Date: 2008-12-30 08:43 pm (UTC)The depressing thing is, that was the accounts master database! It was so 'business critical' that they couldn't take it down to replace it.
no subject
Date: 2008-12-30 08:45 pm (UTC)