SIMON THE PIEMAN
kiwifarms.net
- Joined
- Apr 15, 2025
Something I remembered from my first job.
It was a small company and they've had an IT/support department that would be setting up stuff like user accounts, spinning up new servers etc. Pretty much everything was running under Windows Server, with one ancient machine still running on version 2003.
One day I got an issue logging to one of the remote servers via RDP. I asked their head admin to help me with the issue and he couldn't figure out why I can't log in either. He then asks me if this is urgent, I say it's not but I don't really have anything else to do right now. The perspective of me doing nothing must somehow offended the boomer admin and he said that he's going to tell me "a secret". He then gave me a login and password for an user that everything was running on. And I mean that literally, every single service they've had was running under this one, singular account. After the user/pass was revealed I was instructed to be VERY VERY CAREFUL when typing these login credentials, since mistyping the password three times locks the account and when the account is locked all services stop as well. Yes, you're reading that right, mistyping a password three times cripples the entire company. And it happened a bunch of times when someone else mistyped the password.
When I got home curiosity got the best of me and I tried to look up the IP address of one of the servers I used to work on. It was visible from the internet.
The "secret" didn't even turn out to be a secret at all because these login credentials were hardcoded in a great deal of applications. So in case the account was compromised they couldn't really rotate these at all without some serious firefighting, it would probably take a few days to get everything back up. Yet somehow they're still in business.
It was a small company and they've had an IT/support department that would be setting up stuff like user accounts, spinning up new servers etc. Pretty much everything was running under Windows Server, with one ancient machine still running on version 2003.
One day I got an issue logging to one of the remote servers via RDP. I asked their head admin to help me with the issue and he couldn't figure out why I can't log in either. He then asks me if this is urgent, I say it's not but I don't really have anything else to do right now. The perspective of me doing nothing must somehow offended the boomer admin and he said that he's going to tell me "a secret". He then gave me a login and password for an user that everything was running on. And I mean that literally, every single service they've had was running under this one, singular account. After the user/pass was revealed I was instructed to be VERY VERY CAREFUL when typing these login credentials, since mistyping the password three times locks the account and when the account is locked all services stop as well. Yes, you're reading that right, mistyping a password three times cripples the entire company. And it happened a bunch of times when someone else mistyped the password.
When I got home curiosity got the best of me and I tried to look up the IP address of one of the servers I used to work on. It was visible from the internet.
The "secret" didn't even turn out to be a secret at all because these login credentials were hardcoded in a great deal of applications. So in case the account was compromised they couldn't really rotate these at all without some serious firefighting, it would probably take a few days to get everything back up. Yet somehow they're still in business.