Graeme K. Le Roux, 1-Jul-2002
Some twenty years ago, I came across a report which estimated that 20% of system users chose really stupid passwords. Fast forward to the present, and it seems that nothing much has changed.
A recent conversation about basic security issues with a group of system and network administrators confirmed my suspicions. Even system administrators, it seems, are likely to choose stupid passwords.
Don’t believe me? Try getting hold of a freeware SNMP utility, use it to do a trace route to find the addresses of some of the routers on your network, and then try using the SNMP utility with the password “public”— i.e. the SNMP default.
Even if someone has changed the write password, I’ll bet that you will still be able to read the unit’s configuration by supplying “public” as the read password. And being able to read a router’s configuration can be very helpful to the average hacker.







