Feeds

BOFH plays Pass the Password

Resolution time

  • alert
  • submit to reddit

High performance access to file storage

Episode 1

2007, what a landmark year! A time for striving onward in the pursuit of excellence and a time for putting behind us the upsets of the past year. Upsets like me getting trapped in a lift and having to spend several hours contemplating a bucket-based toilet system in full view of the CCTV camera...

...And upsets like The PFY suffering the indignity of a cavity search so aggressive it took him ten minutes to walk properly and ten pints to get the taste of rubber off the back of his tongue... My getting his luggage 'lost' in Heathrow on the return leg 'because of fog' was really just kicking the man when he was down, but experience has taught me that if you've got to kick someone that's the best time to do it...

Still, it's water under the bridge now and The PFY has agreed to bury the hatchet (Although as there's one in the building somewhere, I'm keeping my wits about me) and we've forged a truce in the spirit of the New Year. In fact, The PFY and I have made so much positive progress that we've made a New Year's resolution to even treat our callers better. And no sooner have we taken a suck on the peace pipe of double-espresso shots than one of our users calls us.

"Password problem?" I predict as The PFY reaches for the hands free button.

"No bet," The PFY replies.

“Hi there, I've just come back from holiday and I seem to have...”

“...forgotten your password over the break?” The PFY suggests helpfully.

“Yes – but only because that stupid expiry made me change it in the last week of work,” she snaps.

“No problem,” the PFY says ignoring the sarcasm. “What's your username – I'll reset your password so you can change it when you log in.”

“Can't you just set it to my normal password?”

“The one that expired?”

“Yes”

“No, sorry, it's expired. But I could reset it and you can choose a new one,” the PFY says,

“Couldn't you just unexpire my old password?” she says, firing up the old whiney interface.

“Not really. Why not choose a password that's easy to remember, like the license plate of your first car?”

“Oh I can't possibly remember that.”

“The name of your favourite beer plus your year of birth?”

“I don't drink beer.”

“Of course not. The address you lived in when you were a kid," the PFY says, with just a touch of testiness.

"We moved around a lot."

"Your first boyfriend's name," The PFY seethes, really starting to lose the plot as far as password security is concerned.

"Ted - but that's too short."

"What about setting it to the reason that he dumped you?"

"What do you mean?"

"Well 'difficult' is nine letters long and..."

"Excuse me," I interject, before The PFY can suggest using the names he may have called her or concatenating the words pain-in-the-arse "Why not set your password to a person's first name and their birthday. You must know someone else's birthday?"

"I do... but wouldn't it be easier to just use my old password?"

"Easier - yes, more secure - no. And we do like to keep you people safe from internet crime," I reply, using the old faithful excuse.

"Wouldn't it be better if you made our network more secure so that it wouldn't matter if we used the same passwords?" she asks, twisting the problem around so it's our fault now...

"We could, but then the systems security would be so secure you'd spend half your time on the phone to us to give you access to it," I respond.

"Isn't that what I'm doing now anyway?" she asks.

"Perhaps I should just mention at this point that while my assistant and I appreciate that liberal use of sarcasm may have served you well in the past, it's our position that we can't compromise the security of the company systems to save you the trouble of having to remember something new."

"I..."

"And so I'm going to get my assistant to change your password to 'security' and have it expire when you login. Is there anything else we can help you with?"

"I... no."

"Excellent, you should be able to login in a couple of minutes."

>click<

"What time is it?" I ask the PFY.

"9:13am."

"So, it's just another 359 days and about 7 hours to go. No problems. We can do it."

>ring<

"Password Problem?" I predict as The PFY reaches for the hands free button.

"No bet," he says as mentally prepares himself for the IT Support version of Groundhog Day.

...

You know, I almost feel bad about offering a hundred quid to the person who can drive The PFY over the edge on the first day. But I did organise it before our truce, so technically my conscience is clear... ®

High performance access to file storage

More from The Register

next story
Seagate brings out 6TB HDD, did not need NO STEENKIN' SHINGLES
Or helium filling either, according to reports
European Court of Justice rips up Data Retention Directive
Rules 'interfering' measure to be 'invalid'
Dropbox defends fantastically badly timed Condoleezza Rice appointment
'Nothing is going to change with Dr. Rice's appointment,' file sharer promises
Cisco reps flog Whiptail's Invicta arrays against EMC and Pure
Storage reseller report reveals who's selling what
Just what could be inside Dropbox's new 'Home For Life'?
Biz apps, messaging, photos, email, more storage – sorry, did you think there would be cake?
IT bods: How long does it take YOU to train up on new tech?
I'll leave my arrays to do the hard work, if you don't mind
Amazon reveals its Google-killing 'R3' server instances
A mega-memory instance that never forgets
USA opposes 'Schengen cloud' Eurocentric routing plan
All routes should transit America, apparently
prev story

Whitepapers

Mainstay ROI - Does application security pay?
In this whitepaper learn how you and your enterprise might benefit from better software security.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.