working off site today
so, in other words, you've found some new electric lines to charge upon?
working off site today
so, in other words, you've found some new electric lines to charge upon?
Burn them all.
I told the dude about it, he just kind of angrily stuck them under his pen caddy. I took them and he came to me and asked where they went.
Where they belong, in the shredder. If they can't be fucked to remember a password then they don't need the job.
I learned how to solve this years ago: send an email from their account to their entire team to the effect of "I love collecting garden gnomes. Please stop by my desk to ask me about it." Dont CC the sender.
Nobody from that team will do that again.
Do you at least have 2FA for all users?
I can't really discuss that, unfortunately.
How so?
If you can gain access to the second factor or bypass it through social engineering it's worse to have it than to not have it. Why? Because it requires extra time every day for something that doesn't work as intended. Kinda like all that airport security after 9-11
what LOLOLCUS said, plus this: https://yewtu.be/watch?v=3jQoAYRKqhg
I'm betting you have some ridiculous password requirements as well, like "Must be 14 characters with an upper case, lower case, symbol, and number, can't have any common words, and can't be the same as your last 12 passwords."
There is the concept of being "too secure", meaning that your system has so many security requirements that your employees become the people subverting the security measures, because they are so onerous that they keep them from being able to work.
No, not really.
They could use an open-source encrypted password wallet.
That's a valid option, but this one of the millennial crowd that has trouble with technology. That's probably beyond him.
What an idiot smh.
(post is archived)