I made a mistake.
I introduced opie.
One Password In Everything.
A simple system, more secure than Passw0rd$, which was the level of imagination exhibited by the higher echelons.
All they needed was the opie generator on their 'phones/PDA/computer.
Everything duly installed and tested. Staff trained.
Geeks loved it.
The I.T director wrote a scathing memo about how it was now too difficult to access the systems and wanted the systems returning to passwords, not some challenge/response system.
I got a right carpeting about wasting resources, and how expensive the whole rollout had been.
Opie was free, as were the generators . Two days of my time to implement and a day training others how to use it. Big costs...
While I was explaining this, I was running John The Ripper on my devbox on the old password files.
Password$, LetMe!nnow, 5alest34m! and my favourite, 4n4!53x! were the passwords of the IT Director,Sales director and a couple of other self congratulatory onanists.

I suggested the key cards. Too expensive.
Back to passwords it went. One bollocking about checking the strength of passwords later and a memo from me saying I felt I could no longer be held responsible for the security of the network if the attitude remained.
written warning ensued, so I fucked off elsewhere.
They were hacked to fuck and back within a month, and not by me, although I was interviewed. That company no longer exists.
Good.
( moonbadger Doesn't judge a fish by its ability to climb trees, Fri 24 Feb 2012, 14:10, Reply)