WelcomeUser Guide
ToSPrivacyCanary
DonateBugsLicense

©2025 Poal.co

471

at one of our remote locations, just grabbed a flat spot that had a free plug and a network port. Happened to look up at the pen caddy on the desk, there's the user's username and password on a post-it note with "Email login"

As I look around, every username and password for every system this person has access to is stuck on the desk. No wonder we can't keep a secure system.

at one of our remote locations, just grabbed a flat spot that had a free plug and a network port. Happened to look up at the pen caddy on the desk, there's the user's username and password on a post-it note with "Email login" As I look around, every username and password for every system this person has access to is stuck on the desk. No wonder we can't keep a secure system.

(post is archived)

[+] [deleted] 4 pts
[–] [deleted] 3 pts

working off site today

so, in other words, you've found some new electric lines to charge upon?

[–] 3 pts

That is absolutely not the case and I deny that.

[–] [deleted] 3 pts

You can't fool me.

[–] 2 pts

Burn them all.

[–] 5 pts

I told the dude about it, he just kind of angrily stuck them under his pen caddy. I took them and he came to me and asked where they went.

[–] 2 pts

Where they belong, in the shredder. If they can't be fucked to remember a password then they don't need the job.

[–] 2 pts

I learned how to solve this years ago: send an email from their account to their entire team to the effect of "I love collecting garden gnomes. Please stop by my desk to ask me about it." Dont CC the sender.

Nobody from that team will do that again.

[–] 2 pts

We had someone do that, except they sent "Hey, I'm coming out this weekend!" to the guy's entire address book.

Much lulz were had.

[–] 2 pts

Do you at least have 2FA for all users?

[–] 2 pts

I can't really discuss that, unfortunately.

[–] [deleted] 2 pts

2FA is mostly security theater.

[–] 2 pts

How so?

[–] 3 pts

If you can gain access to the second factor or bypass it through social engineering it's worse to have it than to not have it. Why? Because it requires extra time every day for something that doesn't work as intended. Kinda like all that airport security after 9-11

[–] 1 pt

I'm betting you have some ridiculous password requirements as well, like "Must be 14 characters with an upper case, lower case, symbol, and number, can't have any common words, and can't be the same as your last 12 passwords."

There is the concept of being "too secure", meaning that your system has so many security requirements that your employees become the people subverting the security measures, because they are so onerous that they keep them from being able to work.

[–] 2 pts

No, not really.

[–] 1 pt

They could use an open-source encrypted password wallet.

[–] 1 pt

That's a valid option, but this one of the millennial crowd that has trouble with technology. That's probably beyond him.

[–] 1 pt

What an idiot smh.

[–] 4 pts

Yah. I have to talk to this person about it, that's going to be fun. They're somewhat combative.

[–] 4 pts

Well combative because they are a moron