All the security precautions in the world go out the window when a user's password is 'password'. Our company policy is to enforce strong, hacker-resistant passwords and we regularly launch dictionary attacks (looking for passwords that are made of common words) and brute force attacks (aaaaaaaa, aaaaaaab, aaaaaaac, etc.) trying every combination of letters and numbers until a match is found. If an employee's password is cracked, that user account is suspended immediately, until the password is changed. |