[CyberFed]

Ok so i am sitting in the computer lab, killing time till my next class, and 2 seats down from me some kid cannot log in (dumb freshmen) so one of the techies on duty comes over and is trying to help him (mind you i am listening in on the whole convo by this point) , for whatever reasons the techie couldnt get it to log in either so he says "here just use my account in the mean time, just dont do anything dumb because it has unrestricted access to most of our schools network" -- now when i here this my eyes light up and now im really paying attention to what they are saying (while trying to look busy on the computer) he then proceeds to tell the kid OUT LOUD the login and PW...let this be a lesson

(the more "PC" version")

[Stedeman]

Foolish yes they where. But bear in mind you just spouted on a public forum; "your still have the account saved for a 'rainy day" and all I did was look to your location to get too much information and if a hacker reads your post you could have just taken the blame for any future issues on that network. So you should take care when calling someone something that you don't incriminate yourself within you own quotes
PS I think you are also skimming on the edge of one of the forum rules as well just FYI

[macklin01]

I think you're just barely on the right side of the line.

But do yourself a favor and lose and forget that information. There are plenty of other temptations in life, and the consequences of giving in to this one are potentially quite severe.

If you'd like to do some good, you might try to find the admin's supervisors and relate this story to them. Then, you're a good Samaritan, rather than a potential hacker, and you will have made this point where it counts and can do some good for the school's network security.

Thanks for the good points! -- Paul

[Mr.Guvernment]

lol

and it is people like him that allow a company security to be compromised .


i would tell him supervisor - your not being a rat, but your are simply being concerned with security.

[Breadfan]

I agree with Paul on this one. While you are correct that saying a login/pw outloud in a crowded room is a dumb idea, keeping that information for a "rainy day" or just to prove how dumb it is, is close to or just barely crossing the line.

I suppose if you wanted to be a pain, you could've typed it as you overheard it, called the guy over and been like "I overhead this. I'm erasing it, but just to let you know, others may have written the info down as well since you said it so loud in this crowded lab. Perhaps you should change your password."

But you are right, that's one dumb way to lose security. Another thing is when people login to accounts in crowded areas. You never know who's looking over your shoulder and a keen eye can nab a password as you type it just as well as a keylogger.

That tech guy has a problem though. Fortunately you probably won't do anything wrong with the info you have, but what about the other 20 people in earshot??

[pik4chu]

Originally posted by Mr.Guvernment
lol

and it is people like him that allow a company security to be compromised .


i would tell him supervisor - your not being a rat, but your are simply being concerned with security.

Then maybe ask for his job

[Mr.Guvernment]

^^^^ hhe, good point

[Stedeman]

If you feel you must do something about this. I would see it best if you where to go to the person who heads the IT group and let them know they have a need to improve their network. And let them know about the big hole they put in it every time one of their people gives out the keys to it. But to be on the PC road I wouldn't mention any names (unless you want the job and don't mind a person with access to your grades to be PO'ed at you)

[cbakey]

I know at my school last year, a student created another account when an admin left there computer loged in and this second account was an admin accound and in turn he put quake on the schools servers....... But this year they made it so when you login as an admin you have a red background and everone else has a blue one, so its harder to get away with doing that. But i have seen this one teacher leve the computer logen in as an admin (her account) and was no where around, so it would be easy for someone to do somethin, but it right next to the door so it would also be easy to get caught on her computer and than wouldnt be good.

[Mr.Guvernment]

i dont think any teacher should or needs any amdin rights to any computer.
the ONLY pepole in any company that need admin rights are the IT / admins of the company - NO one else - everyone else should simple have permission to use what they need.


if a place gives everyone amdin rights then good chance they dont know how to use and set permissions for individual accounts or they are too dam lazy and should be fired!