On Tue, 16 Oct 2007 09:01:15 +0200, scott wrote:

>> Yep, but even worse than that is that help desk personnel will tend to
>> reset passwords for anyone who says they are the person calling in.
> 
> At university we had to actually go to the IT place and show our
> photo-ID before they would reset the password.  They would stick the ID
> into the machine (after supposedly checking the photo), and then scan in
> the barcode on the outside of an envelope.  Inside the envelope was your
> new password :-)

Yeah, some places are saavy enough to do this, but sadly not enough of 
them.

> I'm pretty sure that here I could just phone the IT guys and they'd
> reset my password - but saying that I think they pretty much know
> everyone's voice as we're quite a small outfit.

Here they require you to show up in person to the security office (or the 
help desk area, I don't know which) with your access card; but we also 
have the ability to change our own passwords using a secret question/
answer and a PIN; the PIN is used by the phone system for voice mail 
access as well, so most people remember that easier than their password.

Just don't lose your badge. ;-)

Jim

Post a reply to this message