you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 1 year ago (3 children)

Also, this was found by an audit years ago. Doesn't mean it was fixed, but doesn't mean it was still the same during or after the theft.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 7 points 1 year ago (2 children)

    At least it wasn’t the default password.

    I’ve known clients that have never removed the default admin account, with a default admin password… and looked at me like I had a horn growing out my ear…

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 year ago (1 child)

    I'll admit it, I have systems at work with weak or default passwords. But they don't handle any sensitive information, and exploiting them wouldn't get you any additional privileges on the network.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 4 points 1 year ago

    that's just it... any vulnerable system lets them get their nose in the door, then the camel starts snooping around the tent for whatever it can get. Eventually, they find away to something juicy.

    The thing is, whether we're talking about digital or physical security, the weakest thing in any system is the humans. The sloppy passwords (c'mon it should have been Louvre25! lol.) is a human thing. clicking that phising scam is a human thing. kipping off to the egyption bedroom for tryste with receptionist is a human thing.

    the simple password isn't the problem. The people being complacent is.

  • source
  • parent