Pineapple Express: Someone Is Wrong on the Internet?


log in or register to remove this ad





No, I found that on the print shop's 3 massive Xerox printers, back around 2002. The Xerox support guys had told them that they needed to have unpassworded FTP external access to them, to perform updates, and it was never reported to IT. I got pretty heavy kudos for tracking that one down.
I’m not sure what’s worse, no password or a standard hardcoded password used on all a vendor’s products. The number of contracts I’ve torpedoed because a vendor doesn’t understand having an unchangeable password I found within 6 seconds of Google searching isn’t good enough. I do appreciate their shoddy business practices for creating a career field for me though.
 

I’m not sure what’s worse, no password or a standard hardcoded password used on all a vendor’s products. The number of contracts I’ve torpedoed because a vendor doesn’t understand having an unchangeable password I found within 6 seconds of Google searching isn’t good enough. I do appreciate their shoddy business practices for creating a career field for me though.
I would say that the hard coded type of password is only reasonable when that account can be disabled and, even then, it's not something that's advisable from a basic security standpoint. Open access is just plain stupid and it only happened because people with absolutely no real networking knowledge permitted it. We are far better at detecting that sort of idiocy these days, as we can't assume people will be reasonable.
 

Remove ads

Top