Mike Hadlow on Mythryl: “One little trick I picked up was to create a dummy user in…”

One little trick I picked up was to create a dummy user in production with a UUID password and then set up a cron to grep the logs for that string. Cheap and easy to implement; every system should have it.

Mike Hadlow@mikehadlow.com

I once worked on a large system with millions of users, an oversight meant that clear text passwords were being output in the log files. Astonishing how many were `123456` or `password` or `hello`, or any number of other easily guessable alternatives.

14/10/26, 12:10 pm2 reposts0 likes

Post