Monday morning, I found a tweet by @INFOSECSchool with the above title. I admit, it's a catchy phrase and sure enough, IF you allow easy passwords, it's an invitation to get hacked. This is an area that you have control over though. Teach people about strong passwords, enforce strong Windows login passwords, send them to websites where they can test their passwords for strength, and if they have dozens to remember, use an automated password management tool, because the user is going to be lazy and use the same password all over the place, which is a disaster waiting to happen.
Cancel
