RE: Password Pride - A Humorous Vulnerability

["Miguel Valentin" <valentinousn () verizon net>]

I would say you just encountered another moron that doesn't belong in the
I/T field!!

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of andy cuff
Sent: Monday, January 15, 2007 12:26 PM
To: security-basics () securityfocus com
Subject: Password Pride - A Humorous Vulnerability

I thought I'd share a recent observation with the list.

I was in a bar in San Francisco where my English accent has a habit of 
stimulating conversation with total strangers, in this case it was with a 
webmaster (sadly not webmistress) of a dubious website hosted in Amsterdam
(I 
don't think I need to expand on the nature of the site;)  I mentioned that I

was passionate about Information Security, whereupon, he proceeded to tell
me 
his root password, as he was so proud about how hard it would be to crack!
If 
this was an isolated incident I wouldn't mention it.  However, these
instances 
are becoming ever more frequent, is it my trustworthy face or are others 
experiencing similar errors of judgement?

Best Regards

-- 
Andy Cuff
Computer Network Defence Ltd
www.SecurityWizardry.com