Most of the passwords I am required to have are not protecting anything important. For those, I have four variants of one alpha-numeric password. For critical sites, I have a unique password but, yes, I have the passwords on a CD.
I was not in IT but I was asked to get our new chief of police to set up passwords. I explained one was to keep outsiders out of our system. He thought and said, "Chief." I explained that should protect us well from kids in special ed. After we got a password there, I explained we needed one to keep our police officers out of his email or from sending emails from his account. Some more heavy thought and he gave me his wife's name. I came to the opinion that selecting passwords should be part of the test for hiring.
On the other hand, our IT department was buying a new systme that involved answers to fifty questions. Then, you would be asked the questions at random when logging on. Like no one would keep a list of answers handy.
I am curious, though. What does any of this have to do with honesty?
|