+ Post New Thread
Page 3 of 3 FirstFirst 123
Results 31 to 43 of 43
General Chat Thread, Staff question - why do you have access to my password? in General; Since we're talking security. A friend of mine used to work for the MOD. He would drive into work every ...
  1. #31
    Friez's Avatar
    Join Date
    Dec 2006
    Posts
    839
    Thank Post
    22
    Thanked 22 Times in 21 Posts
    Rep Power
    22

    Re: Staff question - why do you have access to my password?

    Since we're talking security. A friend of mine used to work for the MOD. He would drive into work every day and get greeted by an armed guard at the gate. Normally he would have to wave his security pass under the guards nose to get in, but he eventually figured the guard got so used to letting him in he started to get a bit creative.

    He started to wave packets of fags, and even a packet of bacon under his nose and he didn't even blink.

    That's security for ya!

  2. #32

    Join Date
    Jan 2007
    Location
    Birmingham
    Posts
    807
    Thank Post
    29
    Thanked 36 Times in 24 Posts
    Rep Power
    25

    Re: Staff question - why do you have access to my password?

    Quote Originally Posted by GrumbleDook
    I could always just ask you and you tend to give your password to me anyway.
    Or i could just try: your child's name, your partners name, your car reg.
    or ask one of the pupil's you've given it to.

  3. #33
    Heebeejeebee's Avatar
    Join Date
    Nov 2006
    Location
    Intergalactic Cruise
    Posts
    1,036
    Thank Post
    68
    Thanked 74 Times in 58 Posts
    Rep Power
    34

    Re: Staff question - why do you have access to my password?

    Quote Originally Posted by Lee_K_81
    Or i could just try: your child's name, your partners name, your car reg.
    or ask one of the pupil's you've given it to.
    Just had a staff laptop in (not networked yet). Said member of staff has passworded their (local) account and not told us the password. So I click on password hint and it pops up a single word and - yep - you guessed it - it's the account password.

    Needless to say it's changed now. I might even them them what it is.

    HBJB

  4. #34

    Join Date
    Jan 2007
    Location
    Birmingham
    Posts
    807
    Thank Post
    29
    Thanked 36 Times in 24 Posts
    Rep Power
    25

    Re: Staff question - why do you have access to my password?

    Schools would be a great place to work, and the network would be fine, if it wasnt for teachers and pupils.

  5. #35

    Join Date
    May 2006
    Posts
    1,312
    Thank Post
    101
    Thanked 25 Times in 18 Posts
    Rep Power
    25

    Re: Staff question - why do you have access to my password?

    Quote Originally Posted by Lee_K_81
    Schools would be a great place to work, and the network would be fine, if it wasnt for teachers and pupils.
    Hence our employment in said schools, to repair and minimise the damage

    My headteacher walked past me in the corridor and spoke to me under her breath saying "what on earth possessed them to think there should be children in a school?"

  6. #36


    Join Date
    Oct 2006
    Posts
    3,387
    Thank Post
    183
    Thanked 350 Times in 279 Posts
    Rep Power
    147

    Re: Staff question - why do you have access to my password?

    One day im gunna ask some teachers for their credit card number and pin. Wonder if they'll give me it? Some probably would!

    I know the VAST MAJORITY of the teachers passwords, from art teachers internet to the deputy heads SIMS password. Not written down or owt but they are just so simple i cant help but remember them.

    Its insane, and the teachers moan when a kid forgots his, or has his work deleted because his password was "password"

  7. #37

    Join Date
    May 2006
    Posts
    1,312
    Thank Post
    101
    Thanked 25 Times in 18 Posts
    Rep Power
    25

    Re: Staff question - why do you have access to my password?

    Quote Originally Posted by j17sparky
    One day im gunna ask some teachers for their credit card number and pin. Wonder if they'll give me it? Some probably would!

    I know the VAST MAJORITY of the teachers passwords, from art teachers internet to the deputy heads SIMS password. Not written down or owt but they are just so simple i cant help but remember them.

    Its insane, and the teachers moan when a kid forgots his, or has his work deleted because his password was "password"
    It's strange actually how trusting some of the teachers are. I'm not saying I'd ever abuse my position (because I certainly wouldn't), but on quite a number of occasions a teacher has told me their password for something I needed access to and then added "thats the password I use for everything". Knowing that some of these teachers in question -do- use internet banking and have a number of sensitive accounts elsewhere on the internet including their personal e-mail... it's quite surprising they told me that. I know that they know me, but at the end of the day, I'm just a colleague. How many of you would tell your colleagues your internet banking details or other sensitive information like that?

  8. #38
    gwendes's Avatar
    Join Date
    Jan 2007
    Location
    London
    Posts
    1,473
    Thank Post
    149
    Thanked 27 Times in 26 Posts
    Rep Power
    25

    Re: Staff question - why do you have access to my password?

    Not me! I also think that storing lists of passwords potentially goes against the DPA and puts the sysadmin at risk - publishing something like that is going to have people blaming you for things that go wrong. To end users ignorance is bliss...

  9. #39

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    9,881
    Thank Post
    1,316
    Thanked 1,738 Times in 1,087 Posts
    Blog Entries
    19
    Rep Power
    563

    Re: Staff question - why do you have access to my password?

    I am trying to make the connection between the DPA and storing passwords?

  10. #40

    Join Date
    May 2006
    Posts
    1,312
    Thank Post
    101
    Thanked 25 Times in 18 Posts
    Rep Power
    25

    Re: Staff question - why do you have access to my password?

    Quote Originally Posted by _Bat_
    It's strange actually how trusting some of the teachers are. I'm not saying I'd ever abuse my position (because I certainly wouldn't), but on quite a number of occasions a teacher has told me their password for something I needed access to and then added "thats the password I use for everything". Knowing that some of these teachers in question -do- use internet banking and have a number of sensitive accounts elsewhere on the internet including their personal e-mail... it's quite surprising they told me that. I know that they know me, but at the end of the day, I'm just a colleague. How many of you would tell your colleagues your internet banking details or other sensitive information like that?
    As a perfect example of this, today I had a meeting with a teacher and I needed her password to test something, so this is how the convo goes:

    Me: Do you mind if you enter your password so I can log on as you?
    Teacher: Sure. It's ****. Believe it or not, that's the password I have had since uni.
    Me: Now you are going to tell me that's the password you use for everything?
    Teacher: Yeah, it is. Internet banking, everything. Along with my date of birth, you could take over my life with that information.
    Me: Thank-you very much!

    Now all I have to do is find out her out her birthday on the MIS database and voila.

    On one hand, it's nice to know they trust me enough with their life savings.. on the other hand, it's worrying who else they might have just given that information to. Any other teachers? Pupils? 8O

  11. #41

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,582
    Thank Post
    107
    Thanked 761 Times in 592 Posts
    Rep Power
    179

    Re: Staff question - why do you have access to my password?

    @_Bat_: I don't like asking for passwords for exactly that reason. If I need to test something as a particular user I simply change their password making it evident that I have been into the account.

  12. #42

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    114

    Re: Staff question - why do you have access to my password?

    I am trying to make the connection between the DPA and storing passwords?
    Principle seven.. data should be secure.. which arguably it is not if you leave a list of passwords lying around nearby (paper or electronic).

    OTOH my long list of other people's admin passwords is kept lying around in an encrypted p/w storage utility db... and that db lives in a truecrypt volume together with misc. other sensitive docs... have hideously long non-dictionary passwords for both of them.

    I don't want user p/ws to avoid the (unlikely) possibility of being more caught up in the mess when a user does something naughty and tries to blame it on someone who knows their password.

  13. #43

    Join Date
    Apr 2007
    Posts
    17
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Staff question - why do you have access to my password?

    I would agree with PiqueABoo storing passwords is a security risk and is not standard practice. Also having this information can cause problems with teachers. Teachers or any member of staff dont like to know another person has their password, subsequently they will ask you when they forget which can be tideous exercise to perform for members of staff regularly.

    In the school I am currently a junior technician and passwords are not stored, but when a use forgets his or her password. A password change is forced out to alter the current password for the user. To me this seems like a more efficient way to handle passwords. We only know staff passwords when making configurations for laptops and workstations for mapping drives locally to that specific machine. This is because we have been made to enforce that passwords change monthly from a new directive, this is a right pain since users cannot remember there passwords.

SHARE:
+ Post New Thread
Page 3 of 3 FirstFirst 123

Similar Threads

  1. Password Reset form for ICT staff
    By Rozzer in forum Windows
    Replies: 21
    Last Post: 30th January 2013, 10:01 AM
  2. Staff Access from home????
    By thegrassisgreener in forum Windows
    Replies: 27
    Last Post: 3rd April 2008, 10:41 AM
  3. Replies: 11
    Last Post: 30th October 2007, 06:05 PM
  4. Remote Access for Staff
    By Grommit in forum Windows
    Replies: 10
    Last Post: 16th January 2007, 09:09 PM
  5. Use of domain password (& staff AUP, etc.) ;)
    By mark in forum School ICT Policies
    Replies: 22
    Last Post: 29th June 2005, 02:36 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •