Admin dropped the F-bomb in a password to show hackers who was really 1337
Cursing in login credentials can help keep the bad guys out, but not when the rest of your security is BS
In this week's PWNED report, security researcher Dahvid Schloss of Suzu Labs shares an incident involving a factory with outdated Windows 7 servers connected to CNC milling machines. Despite the company having experienced a security breach six months prior, Schloss was tasked with ensuring the servers were secure. He initially struggled to gain access due to the servers not being connected to the domain, but eventually found a vulnerable server connected to the network.
Upon further investigation, Schloss discovered a password for an admin account written in leet speak as "heyhackergof***yourself." Initially believing it was a joke, Schloss kept the credentials hidden for a week. During a follow-up, he revealed the password to the IT team, who recognized it as the admin account he had set up. The password, while strong, was an embarrassing choice and exposed the factory to further vulnerabilities.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
