full-disclosure - AW: (no subject)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: vogt at hansenet.com (vogt@...senet.com)
Subject: AW: (no subject)

> It's surprising how much flack my post is generating.  If you have good
> change control management in place, you lessen the likelihood of some
> pissed off admin planting time bombs in your system.  There is no 100%
> solution to clearing off an admin from an enterprise, but having scripts
> change passwords across the enterprise is a whole like easier than
> having all of the admins running around changing passwords when the CTO
> calls someone in the office for "The Talk."

Good procedure, good solution. Except that you didn't mention it in your
original mail, which only explained "The Button". Not hard to see how us
readers without the telepathy upgrade couldn't know about the procedure
behind it. :)


Tom