Hacker News Reader

Ages ago I was tasked with migrating a site for a famous workout instructor. I noticed they stored passwords in plain text. His along with a shocking number of user accounts all used just his first name as the password.

hunter2

You are being downvoted because your comment only shows up as ****, which is not a significant contribution to the conversation.

So would your holiness care to change her password?

Once upon a time, I ran ypcat passwd and piped it into John the Ripper on the CompSci Linux cluster at one of the University of California campuses. Within 90s, I had amassed passwords of over 40 users including several lecturers and a tenured professor. The CS IT shop's mistake was running NIS+ rather than something like LDAP + Kerberos.

Edit: ... god

Password.

The username is Cyril Figgis.

god.

password????