"Orchid XP v8" <void [at] devnull> wrote in message
news:4818b6ed$1@news.povray.org...

> What the report *doesn't* say is how many of the passwords thus
> collected were actually _valid_. ;-) I like to believe that office
> workers are actually that smart. You know, for my sanity...

A few years back, I did a test on password security for an app I was working
on. The data in the DB was very important and very sensitive. They type of
data that the competitor would love to see. (Mineral resource exploration
data)

I managed to gather 35% of the passwords with a dictionary hack, including
that of the chief geologist, and another 10% by wandering through the
offices upstairs, including that of the manager of the division.

Post a reply to this message