Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

What should I do when my boss tells me to make passwords the same as usernames by default in our software?

My boss is against requiring our users to have secure passwords, even going so far to request they be setup by default to have passwords the same as their username. What should I do in this situation? What would you do?

Update - Some users have brought up the question of whether the application needs high security. This isn't credit card information for example but does include sensitive information and a mailing list management and sending functionality.

like image 947
Dan Roberts Avatar asked Mar 03 '09 15:03

Dan Roberts


People also ask

Can the password and the user name be the same?

Having the same password as your username will make you a high risk for compromise. Here are other really bad passwords: password. secret.

What should we never use when making a password?

-Don't use easily guessed passwords, such as “password” or “user.” -Do not choose passwords based upon details that may not be as confidential as you'd expect, such as your birth date, your Social Security or phone number, or names of family members. -Do not use words that can be found in the dictionary.

Why is IT important to have your own password and access name when using a work computer?

Passwords provide the first line of defense against unauthorized access to your computer and personal information. The stronger your password, the more protected your computer will be from hackers and malicious software.

Can a boss do anything they want?

A boss "can" do pretty much anything, even if it's illegal. As I see it, the only things a boss can't do are the things his or her employees refuse to comply with. You can also refuse to do anything your boss asks you to do, independently of whether that request is legal, illegal, reasonable or unreasonable.

Can a company require me to give them my Password?

The company can require full access to anything you do for them or on their equipment. Asking for your personal password is absolutely the wrong way to handle that, though; they should be able to set up an administrative override on any system if that's really what they want. If they do so, you should cooperate.

What to do if your boss wants to modify your work log?

If you have your boss' request in writing in any form (paper, e-mail, etc.), make a copy for yourself that can be stored somewhere outside of your boss' control. Depending on the sensitivity of the information stored in the logs he's requested you to modify, you may also want to keep your own copy of the logs.

How do you know if your boss is not into You?

Here are seven revealing signs that your boss just isn’t that into you and what to do about it. 1. You’re Being Micromanaged She’s checking up on your work before it’s due, dictating details that she should trust you to figure out, and generally displaying a lack of confidence that you’ll do your job well.


1 Answers

Make the best case you can for strong passwords and then, unfortunately, if they do not see your point of view either do what they asked or find a better job.

like image 87
Andrew Hare Avatar answered Oct 12 '22 04:10

Andrew Hare