Thursday, August 10

Password Security – WTF Style

The Daily WTF reports on a company’s password security policy:

From: Network Operations

Sent: Friday, May 26, 2006 3:21 PM

To: Everyone

Subject: 2006 Password Change


It's that time of the year again, time for everyone to choose

their new passwords. For new employees, we apologize for the

inconvenience, but this a practice we follow to maintain the

integrity of our network security.


Please reply to this email with the new password(s) you want to

use for the systems outlined below. Starting next Friday evening,

we will work through the weekend to change everyone's passwords

and anticipate being complete by Monday June 5th at 6:00am.




When we receive your reply, we will let you know if the passwords

meet the guidelines outlined. Please let us know if you have any

questions or concerns.


Thank you for your continued cooperation,


Network Security & Operations


The passwords e-mailed back were then stored in passwords.xls on a public network drive.

No comments: