RE: Passwords on paper? Seriously?

2010-07-15 Thread Steven M. Caesare
I write them in pig-latin so they are upersay ecretsay. -sc From: David Lum [mailto:david@nwea.org] Sent: Thursday, July 15, 2010 10:47 AM To: NT System Admin Issues Subject: Passwords on paper? Seriously? I'm weirder than I thought, it would NEVER occur to me to tell someone to ha

Re: Passwords on paper? Seriously?

2010-07-15 Thread Ben Scott
On Thu, Jul 15, 2010 at 10:47 AM, David Lum wrote: > I’m weirder than I thought, it would NEVER occur to me to tell someone to > have *any* password on paper ANYWHERE, but apparently some security guys > don’t have a problem with it: For shared/system passwords, we keep many of them on paper lo

RE: Passwords on paper? Seriously?

2010-07-15 Thread Raper, Jonathan - Eagle
I keep almost all of my passwords (both work and personal) in my head. I have ONE password written down, but that's because I didn't create it, and there are too many variables for character substitutions (eyeroll). I used to keep a list of passwords for some infrequently used system in a list o

RE: Passwords on paper? Seriously?

2010-07-15 Thread Cameron Cooper
We tell all our employees to never write down their password for network resources... although we did have an outside sales person that was let go and they shipped the laptop back. When I opened the box up, the laptop was still on, logged in and to top it off... err bottom... the password was tape

RE: Passwords on paper? Seriously?

2010-07-15 Thread Sean Rector
+1 Sean Rector, MCSE -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Thursday, July 15, 2010 10:55 AM To: NT System Admin Issues Subject: Re: Passwords on paper? Seriously? On Thu, Jul 15, 2010 at 10:47 AM, David Lum wrote: > I'm weirder than I tho

RE: Passwords on paper? Seriously?

2010-07-15 Thread Andy Shook
Awesome. Shook From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Thursday, July 15, 2010 10:52 AM To: NT System Admin Issues Subject: RE: Passwords on paper? Seriously? I write them in pig-latin so they are upersay ecretsay. -sc From: David Lum [mailto:david@nwea.org] Sent

RE: Passwords on paper? Seriously?

2010-07-15 Thread Erik Goldoff
Argg ! I used to face that post-it and under the keyboard issue a lot at a previous employer … so I recommended that if a user HAD to write down their password I provided them a blank business card and told them to keep it in their wallet. That way it gets the same protection as their

RE: Passwords on paper? Seriously?

2010-07-15 Thread John Hornbuckle
I'm not arguing with Schneier, though! From: David Lum [mailto:david@nwea.org] Sent: Thursday, July 15, 2010 10:47 AM To: NT System Admin Issues Subject: Passwords on paper? Seriously? I'm weirder than I thought, it would NEVER occur to me to tell someone to have *any* password on paper AN

RE: Passwords on paper? Seriously?

2010-07-15 Thread Michael B. Smith
B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Andy Shook [mailto:andy.sh...@peak10.com] Sent: Thursday, July 15, 2010 11:11 AM To: NT System Admin Issues Subject: RE: Passwords on paper? Seriously? Awesome. Shook From: Steven M. Caesare [mailto:scaes...@caesare.com

RE: Passwords on paper? Seriously?

2010-07-15 Thread Steven M. Caesare
You missed an "L" in Shooky's. -sc From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, July 15, 2010 11:15 AM To: NT System Admin Issues Subject: RE: Passwords on paper? Seriously? I just went and looked. Personally, I have 186 _different_ pa

Re: Passwords on paper? Seriously?

2010-07-15 Thread Jonathan Link
wrote: > You missed an “L” in Shooky’s. > > > > -sc > > > > *From:* Michael B. Smith [mailto:mich...@smithcons.com] > *Sent:* Thursday, July 15, 2010 11:15 AM > > *To:* NT System Admin Issues > *Subject:* RE: Passwords on paper? Seriously? > > > >

RE: Passwords on paper? Seriously?

2010-07-15 Thread Ralph Smith
also. From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com] Sent: Thursday, July 15, 2010 10:56 AM To: NT System Admin Issues Subject: RE: Passwords on paper? Seriously? I keep almost all of my passwords (both work and personal) in my head. I have ONE password written down

RE: Passwords on paper? Seriously?

2010-07-15 Thread David Lum
Dave From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, July 15, 2010 8:15 AM To: NT System Admin Issues Subject: RE: Passwords on paper? Seriously? I just went and looked. Personally, I have 186 _different_ passwords for the various websites and applications I use. For my cust

Re: Passwords on paper? Seriously?

2010-07-15 Thread RichardMcClary
Paper gets lost. We have a user who wrote all her user names and passwords on the silver bezel of her laptop... David Lum wrote on 07/15/2010 09:47:10 AM: > I?m weirder than I thought, it would NEVER occur to me to tell > someone to have *any* password on paper ANYWHERE, but apparently > som

Re: Passwords on paper? Seriously?

2010-07-15 Thread Richard Stovall
Surely you misspelled "had". (PS That is an awesome story...) On Thu, Jul 15, 2010 at 11:57 AM, wrote: > > Paper gets lost. We have a user who wrote all her user names and passwords > on the silver bezel of her laptop... > > David Lum wrote on 07/15/2010 09:47:10 AM: > > > > I’m weirder than

RE: Passwords on paper? Seriously?

2010-07-15 Thread Michael B. Smith
home)... Dave From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, July 15, 2010 8:15 AM To: NT System Admin Issues Subject: RE: Passwords on paper? Seriously? I just went and looked. Personally, I have 186 _different_ passwords for the various websites and applications I use. F

RE: Passwords on paper? Seriously?

2010-07-15 Thread RichardMcClary
om > > From: David Lum [mailto:david@nwea.org] > Sent: Thursday, July 15, 2010 11:56 AM > To: NT System Admin Issues > Subject: RE: Passwords on paper? Seriously? > > Right, so how many of those are on paper? I have probably 35-40 > password for various client things ? c

Re: Passwords on paper? Seriously?

2010-07-15 Thread James Rankin
gt; > Consultant and Exchange MVP > > http://TheEssentialExchange.com > > > > *From:* David Lum [mailto:david@nwea.org] > *Sent:* Thursday, July 15, 2010 11:56 AM > > *To:* NT System Admin Issues > *Subject:* RE: Passwords on paper? Seriously? > > > > Right, so how many o

RE: Passwords on paper? Seriously?

2010-07-15 Thread Andy Shook
Mine are all the letter 'a'. :) Did you get that? Shook From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, July 15, 2010 11:15 AM To: NT System Admin Issues Subject: RE: Passwords on paper? Seriously? I just went and looked. Personally, I have 186 _different_ pas

Re: Passwords on paper? Seriously?

2010-07-15 Thread Ben Scott
On Thu, Jul 15, 2010 at 12:06 PM, Michael B. Smith wrote: > The only time I use paper is when I have to send a fax. PC-based faxing. ;-) -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

RE: Passwords on paper? Seriously?

2010-07-15 Thread Michael B. Smith
July 15, 2010 12:47 PM To: NT System Admin Issues Subject: Re: Passwords on paper? Seriously? On Thu, Jul 15, 2010 at 12:06 PM, Michael B. Smith wrote: > The only time I use paper is when I have to send a fax. PC-based faxing. ;-) -- Ben ~ Finally, powerful endpoint security that

Re: Passwords on paper? Seriously?

2010-07-15 Thread Ben Scott
On Thu, Jul 15, 2010 at 12:51 PM, Michael B. Smith wrote: > I hate it when (and it's very common) I receive PDFs that have > to be filled out - but it's been disabled by the author. Lots of > government forms are that way. AARRGGHHH Ohhh. I feel your pain. What I do is "print" them from Acrob

Re: Passwords on paper? Seriously?

2010-07-15 Thread Ben Scott
On Thu, Jul 15, 2010 at 12:46 PM, Andy Shook wrote: > Mine are all the letter ‘a’.  J I've noticed that a lot of people have a password of "". -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

RE: Passwords on paper? Seriously?

2010-07-15 Thread Ralph Smith
Thursday, July 15, 2010 12:52 PM > To: NT System Admin Issues > Subject: RE: Passwords on paper? Seriously? > > Don't get me startedthis is a hot button of mine! :-P > > I hate it when (and it's very common) I receive PDFs that have to be > filled out - but i

RE: Passwords on paper? Seriously?

2010-07-15 Thread tony patton
: tony.pat...@quinn-insurance.com From: "Ralph Smith" To: "NT System Admin Issues" Date: 15/07/2010 18:01 Subject: RE: Passwords on paper? Seriously? Or somebody scans in a paper form to PDF and emails it you... I use PDF-XChange Viewer which lets you clic

Re: Passwords on paper? Seriously?

2010-07-15 Thread Ben Scott
On Thu, Jul 15, 2010 at 1:00 PM, Ralph Smith wrote: > Or somebody scans in a paper form to PDF and emails it you... I've caught people here printing something out only to scan it right back in. I resist the urge to beat them mercilessly and instead introduce them to PDFCreator. > I use PDF-XC

Re: Passwords on paper? Seriously?

2010-07-15 Thread Kurt Buff
On Thu, Jul 15, 2010 at 07:47, David Lum wrote: > I’m weirder than I thought, it would NEVER occur to me to tell someone to > have *any* password on paper ANYWHERE, but apparently some security guys > don’t have a problem with it: > > http://news.cnet.com/8301-27080_3-20010621-245.html?tag=mncol;t

Re: Passwords on paper? Seriously?

2010-07-15 Thread Robert Cato
http://howsecureismypassword.net/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

Re: Passwords on paper? Seriously?

2010-07-15 Thread Richard Stovall
On Thu, Jul 15, 2010 at 1:19 PM, Ben Scott wrote: > On Thu, Jul 15, 2010 at 1:00 PM, Ralph Smith > wrote: > > Or somebody scans in a paper form to PDF and emails it you... > > I've caught people here printing something out only to scan it right > back in. I resist the urge to beat them mercile

RE: Passwords on paper? Seriously?

2010-07-15 Thread Greg Olson
System Admin Issues Subject: RE: Passwords on paper? Seriously? When I first started working in IT about ten years ago every user had a permanent password and the IT department kept a list on paper. After about a month I could remember the passwords for all 150 or so employees, and everyone

RE: Passwords on paper? Seriously?

2010-07-15 Thread N Parr
2010 12:28 PM To: NT System Admin Issues Subject: Re: Passwords on paper? Seriously? On Thu, Jul 15, 2010 at 1:19 PM, Ben Scott wrote: On Thu, Jul 15, 2010 at 1:00 PM, Ralph Smith wrote: > Or somebody scans in a paper form to PDF and emails it you... I&#

RE: Passwords on paper? Seriously?

2010-07-15 Thread Ralph Smith
n why he was doing it this way, the answer was - "It just seemed easier". From: Richard Stovall [mailto:rich...@gmail.com] Sent: Thursday, July 15, 2010 1:28 PM To: NT System Admin Issues Subject: Re: Passwords on paper? Seriously? On Thu, Jul 15,

RE: Passwords on paper? Seriously?

2010-07-15 Thread Marc Maiffret
It does sound funny the idea of paper passwords but the reality is the risk is extremely low of you having an attacker in your physical presence. Now there are of course the caveats of wives/husbands/girlfriends/boyfriends snooping around. So remember in those cases that BrainPass is the best place

RE: Passwords on paper? Seriously?

2010-07-15 Thread Ralph Smith
Depends on how you keep the > -Original Message- > From: Kurt Buff [mailto:kurt.b...@gmail.com] > Sent: Thursday, July 15, 2010 1:22 PM > To: NT System Admin Issues > Subject: Re: Passwords on paper? Seriously? > > On Thu, Jul 15, 2010 at 07:47, David Lum wrote:

RE: Passwords on paper? Seriously?

2010-07-15 Thread Michael B. Smith
Scott [mailto:mailvor...@gmail.com] Sent: Thursday, July 15, 2010 1:20 PM To: NT System Admin Issues Subject: Re: Passwords on paper? Seriously? On Thu, Jul 15, 2010 at 1:00 PM, Ralph Smith wrote: > Or somebody scans in a paper form to PDF and emails it you... I've caught people here printing somet

RE: Passwords on paper? Seriously?

2010-07-15 Thread Crawford, Scott
may be a bit strong in this case, though I'm open to being proven wrong. I think of it more as "nagware". -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, July 15, 2010 1:27 PM To: NT System Admin Issues Subject: RE: Passwords on pape

RE: Passwords on paper? Seriously?

2010-07-15 Thread Michael B. Smith
ultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Thursday, July 15, 2010 2:33 PM To: NT System Admin Issues Subject: RE: Passwords on paper? Seriously? One nice feature it had was the ability to in

RE: Passwords on paper? Seriously?

2010-07-15 Thread Ralph Smith
Thursday, July 15, 2010 2:33 PM > To: NT System Admin Issues > Subject: RE: Passwords on paper? Seriously? > > One nice feature it had was the ability to install with GP as an .msi > though that has been removed. You can also install it on a print server so > users can just

Re: Passwords on paper? Seriously?

2010-07-15 Thread Ben Scott
On Thu, Jul 15, 2010 at 2:27 PM, Michael B. Smith wrote: > What does pdfcreator do for you that CutePDF-free doesn't do? Never tried CutePDF. For all I know, they're functionally identical. Some time back, someone suggested PDFCreator, we evaluated it, it did the job very well, so we went wit

Re: Passwords on paper? Seriously?

2010-07-15 Thread Richard Stovall
e- > > From: Crawford, Scott [mailto:crawfo...@evangel.edu] > > Sent: Thursday, July 15, 2010 2:33 PM > > To: NT System Admin Issues > > Subject: RE: Passwords on paper? Seriously? > > > > One nice feature it had was the ability to install with GP as an .msi >

Re: Passwords on paper? Seriously?

2010-07-15 Thread Kurt Buff
rver, >> which not all of them seem to do.  No nagware or toolbar. >> >> I'm sure everybody has their favorites. >> >> >> >> >> > -Original Message- >> > From: Crawford, Scott [mailto:crawfo...@evangel.edu] >> > Sent: Thu

Re: Passwords on paper? Seriously?

2010-07-15 Thread Angus Scott-Fleming
On 15 Jul 2010 at 15:14, Michael B. Smith wrote: > No way I could remember all of those. I use a password management > application. +1 here ... encrypted password database in my Palm phone, synced to encrypted copy on my laptop. I export to a memo in the phone or print to a TXT file or P

RE: Passwords on paper? Seriously?

2010-07-15 Thread Phillip Partipilo
Parametric Solutions Inc. Jupiter, Florida (561) 747-6107 -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Thursday, July 15, 2010 10:55 AM To: NT System Admin Issues Subject: Re: Passwords on paper? Seriously? On Thu, Jul 15, 2010 at 10:47 AM, David Lum wrote: >

Re: Passwords on paper? Seriously?

2010-07-15 Thread Ben Scott
On Thu, Jul 15, 2010 at 2:48 PM, Angus Scott-Fleming wrote: > Switching to a new phone is going to be > a major PITA as neither of them is available on Android. I'm with you there (still have a Centro). Have you tried a WebOS phone (Pre, etc.) with the PalmOS emulator that's supposed to be out

Re: Passwords on paper? Seriously?

2010-07-15 Thread Ben Scott
On Thu, Jul 15, 2010 at 3:12 PM, Phillip Partipilo wrote: > We were told by the DSS to keep a log of master system passwords in the > security container (safe).  Which is kind of irrelevant in our situation since > we have standalone systems, and these guys never heard of flipping the > CMOS reset

RE: Passwords on paper? Seriously?

2010-07-15 Thread Phillip Partipilo
good reason - disgruntled sysadmin syndrome perhaps). Phillip Partipilo Parametric Solutions Inc. Jupiter, Florida (561) 747-6107 -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Thursday, July 15, 2010 3:22 PM To: NT System Admin Issues Subject: Re: Passwords on

Re: Passwords on paper? Seriously?

2010-07-15 Thread Andrew S. Baker
Regards, > > > > Michael B. Smith > > Consultant and Exchange MVP > > http://TheEssentialExchange.com > > > > *From:* Andy Shook [mailto:andy.sh...@peak10.com] > *Sent:* Thursday, July 15, 2010 11:11 AM > > *To:* NT System Admin Issues > *Subject:* RE: Passwords o

Re: Passwords on paper? Seriously?

2010-07-15 Thread Ben Scott
On Thu, Jul 15, 2010 at 3:47 PM, Phillip Partipilo wrote: >>> these guys never heard of flipping the >>> CMOS reset jumper and booting a pnordahl disc. >> >> That's why you're required to audit the system regularly. > > The security seal on the case would really be the only giveaway. The BIOS p

Re: Passwords on paper? Seriously?

2010-07-15 Thread Angus Scott-Fleming
> On Thu, Jul 15, 2010 at 11:57, Richard Stovall wrote: > > As they say, "+1" for Bullzip as a company. > > Their MD5 utility adds the ability to calculate an MD5 sum from the > > right-click context menu in Windows.  I use it darn near every day. > > http://www.bullzip.com/products/md5/info.php

Re: Passwords on paper? Seriously?

2010-07-15 Thread Angus Scott-Fleming
On 15 Jul 2010 at 14:55, Ben Scott wrote: > > (Other than install a malware toolbar?) > > I've never installed the toolbar so I wouldn't know about that. As > I recall, there was a fairly obvious option to install it or not. The > installer easily exposes the option to not install it for an

Re: Passwords on paper? Seriously?

2010-07-15 Thread Ben Scott
On Thu, Jul 15, 2010 at 10:15 PM, Angus Scott-Fleming wrote: > ... Adobe Reader > won't download without enabling scripting, at which point you have to uncheck > "Free McAfee Security Scan". Don't forget that [expletive] "Adobe Download Manager" crap. ftp://ftp.adobe.com/ still works, fortun

Re: Passwords on paper? Seriously?

2010-07-15 Thread Ben Scott
On Thu, Jul 15, 2010 at 10:15 PM, Angus Scott-Fleming wrote: > It has one thing I haven't seen elsewhere - it will > autopopulate the comparison field if you have [filename].MD5 in the standard > format in the same directory FWIW: If you have the GNU tools and are of command-line persuasion, "m

Re: Passwords on paper? Seriously?

2010-07-15 Thread Richard Stovall
Interesting. Thanks. I will check it out. On Thu, Jul 15, 2010 at 10:15 PM, Angus Scott-Fleming wrote: > > On Thu, Jul 15, 2010 at 11:57, Richard Stovall > wrote: > > > As they say, "+1" for Bullzip as a company. > > > Their MD5 utility adds the ability to calculate an MD5 sum from the > > > r

Re: Passwords on paper? Seriously?

2010-07-16 Thread Angus Scott-Fleming
On 15 Jul 2010 at 22:20, Ben Scott wrote: > Don't forget that [expletive] "Adobe Download Manager" crap. Here's the batch file I use to retrieve the latest flash player = Included Stuff Follows = :: Flash 10 for Windows2000-7 Internet Explorer: wget http://fpdownload.a

RE: Passwords on paper? Seriously?

2010-07-16 Thread Mike Gill
.@geoapps.com] Sent: Friday, July 16, 2010 7:46 AM To: NT System Admin Issues Subject: Re: Passwords on paper? Seriously? On 15 Jul 2010 at 22:20, Ben Scott wrote: > Don't forget that [expletive] "Adobe Download Manager" crap. Here's the batch file I use to retrieve the lates

Re: Passwords on paper? Seriously?

2010-07-16 Thread Ben Scott
On Fri, Jul 16, 2010 at 12:42 PM, Mike Gill wrote: > Or just use these links instead: > > http://www.adobe.com/go/full_flashplayer_win_msi > http://www.adobe.com/go/full_flashplayer_win_pl_msi What would be really nice is links like that for Acrobat Reader. -- Ben ~ Finally, powerful endpoint

RE: Passwords on paper? Seriously?

2010-07-16 Thread Joseph L. Casale
> What would be really nice is links like that for Acrobat Reader. You apply for distro rights [1], they email you a link. Reader is packaged like sh!t, updates are msi patches and they are always messing with the stupid thing so that every version is an exercise in customization. I've never fou

Re: Passwords on paper? Seriously?

2010-07-16 Thread Ben Scott
On Fri, Jul 16, 2010 at 1:38 PM, Joseph L. Casale wrote: >> What would be really nice is links like that for Acrobat Reader. > > You apply for distro rights [1], they email you a link. I seem to recall that, when I did that for Acrobat Reader long ago, the link they sent was version-specific, u

Re: Passwords on paper? Seriously?

2010-07-16 Thread Angus Scott-Fleming
On 16 Jul 2010 at 9:42, Mike Gill wrote: > Or just use these links instead: > > http://www.adobe.com/go/full_flashplayer_win_msi > http://www.adobe.com/go/full_flashplayer_win_pl_msi > > That will always get you the current version and in MSI format without the > addons/toolbars/scanners. If yo

Re: Passwords on paper? Seriously?

2010-07-20 Thread Steven Peck
t;> strong >> > in this case, though I'm open to being proven wrong. I think of it >> more as >> > "nagware". >> > >> > -Original Message- >> > From: Michael B. Smith [mailto:mich...@smithcons.com] >> > Sent: Thurs