Our blog

Weak and common passwords have been a thorn in your IT departments back for decades. Strong and hard to remember passwords have been a thorn in the average users back for the same amount of time. We all understand the importance of smart passwords and how they protect us, yet finding a balance that works for both sides continues to be elusive.

If you work in IT, you’ve heard “Passwords are Dead” for years. While that may be so, they are still very much alive and well. But, before I jump in, why have so many experts declared passwords to be dead? The short answer, because we don’t know how to use them properly. The concept of passwords aka ‘something you know’ is still valid, and useful. Passwords, like  Debit or Credit Card PIN’s  is something you know and continue to be a good strategy to protect your secrets.

The human factor will always be the weakest link in any security strategy. After so many years of security engagements, that is my conclusion. I’m not only including internal on-site assessments but external penetration tests and covert physical assessments too.

As a penetration tester I’ve seen hundreds of different  networks over the years. Networks belonging to small, medium and large clients from many sectors. For example, manufacturing, law enforcement, hospitals, local government, law firms, K-12 education, utilities and many others.