Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.misc > #93444 > unrolled thread

Idiots Rule - Giant Danish Data Breech - GUESS The Working Password

Back to article view | Back to comp.os.linux.misc

Contents

  Idiots Rule - Giant Danish Data Breech - GUESS The Working Password c186282 <c186282@nnada.net> - 2026-10-11 21:48 -0400
    Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password Woozy Song <suzyw0ng@outlook.com> - 2026-10-12 12:24 +0800
      Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password c186282 <c186282@nnada.net> - 2026-10-12 02:06 -0400
        Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password "Carlos E.R." <robin_listas@es.invalid> - 2026-10-12 12:02 +0200
        Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password Rich <rich@example.invalid> - 2026-10-13 03:20 +0000
          Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password c186282 <c186282@nnada.net> - 2026-10-13 01:42 -0400
      Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password The Natural Philosopher <tnp@invalid.invalid> - 2026-10-12 10:32 +0100
    Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password Andy Burns <usenet@andyburns.uk> - 2026-10-12 08:49 +0100
      Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password The Natural Philosopher <tnp@invalid.invalid> - 2026-10-12 10:33 +0100
      Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2026-10-12 16:27 +0000
    Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password The Natural Philosopher <tnp@invalid.invalid> - 2026-10-12 10:31 +0100
      Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password "Carlos E.R." <robin_listas@es.invalid> - 2026-10-12 12:09 +0200
    Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password John Ames <commodorejohn@gmail.com> - 2026-10-12 08:38 -0700
      Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2026-10-12 16:27 +0000
        Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password Lawrence D’Oliveiro <ldo@nz.invalid> - 2026-10-14 00:20 +0000
          Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password c186282 <c186282@nnada.net> - 2026-10-13 21:44 -0400
        Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password Lawrence D’Oliveiro <ldo@nz.invalid> - 2026-10-14 00:49 +0000
          Re: Idiots Rule - Giant Danish Data Breech - GUESS The Working Password c186282 <c186282@nnada.net> - 2026-10-13 21:50 -0400
    Re: Idiots Rule [. . .] Cóilín Nioclásín Glostéir <thanks-to@Taf.com> - 2026-10-12 20:33 +0000
      Re: Idiots Rule [. . .] The Natural Philosopher <tnp@invalid.invalid> - 2026-10-13 08:15 +0100
        Re: Idiots Rule [. . .] "Peyton" <peyton@somewhere.com> - 2026-10-13 14:33 -0700
          Re: Idiots Rule [. . .] c186282 <c186282@nnada.net> - 2026-10-13 21:51 -0400
          Re: Idiots Rule [. . .] The Natural Philosopher <tnp@invalid.invalid> - 2026-10-14 08:50 +0100

Page 1 of 2  [1] 2  Next page →

#93444 — Idiots Rule - Giant Danish Data Breech - GUESS The Working Password

https://cphpost.dk/2026-10-10/news/round-up/123456-password-used-in-massive-danish-cpr-data-breach/

At least three accounts at the company linked to a major
breach of Denmark’s CPR register reportedly used the
password “123456”, including an administrator account.

At least three user accounts at the Funen-based IT company
Pays used the password “123456” when hackers gained access
to Denmark’s CPR register, Politiken reports.

One of them was the company’s administrator account.

The breach exposed information linked to around 8.8 million
CPR numbers. The CPR system is Denmark’s central civil
registration database and contains personal information
on people living or previously registered in Denmark.

. . .

   Well ... if it's not easy to remember then they'll
   write it on a Post-It and stick it to their monitor :-)

   "Security" is mostly an illusion, the human factor
   always works against it. Try to fix that and then
   the humans can't/won't do anything useful.

   Seems that few giant hacks are like in the movies,
   super-clever people with super-computers deep
   probing remote systems. It's idiots, and insiders
   mostly - basically handing over the keys to the
   kingdom.

[toc] | [next] | [standalone]

#93450

c186282 wrote:
> https://cphpost.dk/2026-10-10/news/round-up/123456-password-used-in-massive-danish-cpr-data-breach/ 
> 
> 
> At least three accounts at the company linked to a major
> breach of Denmark’s CPR register reportedly used the
> password “123456”, including an administrator account.
> 
> At least three user accounts at the Funen-based IT company
> Pays used the password “123456” when hackers gained access
> to Denmark’s CPR register, Politiken reports.
> 
> One of them was the company’s administrator account.
> 
> The breach exposed information linked to around 8.8 million
> CPR numbers. The CPR system is Denmark’s central civil
> registration database and contains personal information
> on people living or previously registered in Denmark.
> 
> . . .
> 
>    Well ... if it's not easy to remember then they'll
>    write it on a Post-It and stick it to their monitor :-)
> 
>    "Security" is mostly an illusion, the human factor
>    always works against it. Try to fix that and then
>    the humans can't/won't do anything useful.
> 
>    Seems that few giant hacks are like in the movies,
>    super-clever people with super-computers deep
>    probing remote systems. It's idiots, and insiders
>    mostly - basically handing over the keys to the
>    kingdom.
> 
My bank authenticator app prohibits PINs such as 1234 (or 2580 which is 
all digits in a line on keypad)

[toc] | [prev] | [next] | [standalone]

#93454

On 10/12/26 00:24, Woozy Song wrote:
> c186282 wrote:
>> https://cphpost.dk/2026-10-10/news/round-up/123456-password-used-in- 
>> massive-danish-cpr-data-breach/
>>
>> At least three accounts at the company linked to a major
>> breach of Denmark’s CPR register reportedly used the
>> password “123456”, including an administrator account.
>>
>> At least three user accounts at the Funen-based IT company
>> Pays used the password “123456” when hackers gained access
>> to Denmark’s CPR register, Politiken reports.
>>
>> One of them was the company’s administrator account.
>>
>> The breach exposed information linked to around 8.8 million
>> CPR numbers. The CPR system is Denmark’s central civil
>> registration database and contains personal information
>> on people living or previously registered in Denmark.
>>
>> . . .
>>
>>    Well ... if it's not easy to remember then they'll
>>    write it on a Post-It and stick it to their monitor :-)
>>
>>    "Security" is mostly an illusion, the human factor
>>    always works against it. Try to fix that and then
>>    the humans can't/won't do anything useful.
>>
>>    Seems that few giant hacks are like in the movies,
>>    super-clever people with super-computers deep
>>    probing remote systems. It's idiots, and insiders
>>    mostly - basically handing over the keys to the
>>    kingdom.
>>
> My bank authenticator app prohibits PINs such as 1234 (or 2580 which is 
> all digits in a line on keypad)

   Apparently not in Danish govt  :-)

   Likely very OLD passwords 'grandfathered' in.

   Anyway, as said, make it too difficult for the
   humans and they'll find CHEATS that may be even
   less secure than '123456'.

   For Linux/Unix-based, it's not too hard to get
   SSH to drop connections after a few bad passwords.
   This simple fix makes it very inefficient for
   outsiders to bombard the servers with random
   shit.

[toc] | [prev] | [next] | [standalone]

#93475

On 2026-10-12 08:06, c186282 wrote:
> On 10/12/26 00:24, Woozy Song wrote:
>> c186282 wrote:
>>> https://cphpost.dk/2026-10-10/news/round-up/123456-password-used-in- 
>>> massive-danish-cpr-data-breach/
>>>
>>> At least three accounts at the company linked to a major
>>> breach of Denmark’s CPR register reportedly used the
>>> password “123456”, including an administrator account.
>>>
>>> At least three user accounts at the Funen-based IT company
>>> Pays used the password “123456” when hackers gained access
>>> to Denmark’s CPR register, Politiken reports.
>>>
>>> One of them was the company’s administrator account.
>>>
>>> The breach exposed information linked to around 8.8 million
>>> CPR numbers. The CPR system is Denmark’s central civil
>>> registration database and contains personal information
>>> on people living or previously registered in Denmark.
>>>
>>> . . .
>>>
>>>    Well ... if it's not easy to remember then they'll
>>>    write it on a Post-It and stick it to their monitor :-)
>>>
>>>    "Security" is mostly an illusion, the human factor
>>>    always works against it. Try to fix that and then
>>>    the humans can't/won't do anything useful.
>>>
>>>    Seems that few giant hacks are like in the movies,
>>>    super-clever people with super-computers deep
>>>    probing remote systems. It's idiots, and insiders
>>>    mostly - basically handing over the keys to the
>>>    kingdom.
>>>
>> My bank authenticator app prohibits PINs such as 1234 (or 2580 which 
>> is all digits in a line on keypad)
> 
>    Apparently not in Danish govt  :-)
> 
>    Likely very OLD passwords 'grandfathered' in.
> 
>    Anyway, as said, make it too difficult for the
>    humans and they'll find CHEATS that may be even
>    less secure than '123456'.

Like sharing passwords between people. Even with two factors.

> 
>    For Linux/Unix-based, it's not too hard to get
>    SSH to drop connections after a few bad passwords.
>    This simple fix makes it very inefficient for
>    outsiders to bombard the servers with random
>    shit.
> 
> 


-- 
Cheers, Carlos.
ES🇪🇸, EU🇪🇺;

[toc] | [prev] | [next] | [standalone]

#93555

c186282 <c186282@nnada.net> wrote:
>   For Linux/Unix-based, it's not too hard to get SSH to drop 
>   connections after a few bad passwords.  This simple fix makes it 
>   very inefficient for outsiders to bombard the servers with random 
>   shit.

No one (well, no one in their right mind) performs an online password 
guessing attack anymore.  For those attacks that occur via cracked 
passwords the route is usually via two channels:

1) The crackers obtain hashed passwords from some exploited service, 
and go after the hashed password data with something like this: 
https://arstechnica.com/information-technology/2012/12/25-gpu-cluster-cracks-every-standard-windows-password-in-6-hours/

2) They then map users of the service in #1 who's passwords they 
managed to crack (and there will be a lot of these) to other services, 
and exploit the fact that the average joe simply reuses the same 
password everywhere.

[toc] | [prev] | [next] | [standalone]

#93560

On 10/12/26 23:20, Rich wrote:
> c186282 <c186282@nnada.net> wrote:
>>    For Linux/Unix-based, it's not too hard to get SSH to drop
>>    connections after a few bad passwords.  This simple fix makes it
>>    very inefficient for outsiders to bombard the servers with random
>>    shit.
> 
> No one (well, no one in their right mind) performs an online password
> guessing attack anymore.  For those attacks that occur via cracked
> passwords the route is usually via two channels:
> 
> 1) The crackers obtain hashed passwords from some exploited service,
> and go after the hashed password data with something like this:
> https://arstechnica.com/information-technology/2012/12/25-gpu-cluster-cracks-every-standard-windows-password-in-6-hours/
> 
> 2) They then map users of the service in #1 who's passwords they
> managed to crack (and there will be a lot of these) to other services,
> and exploit the fact that the average joe simply reuses the same
> password everywhere.

   Around-around.

   Even that's a lot of work.

   Easier to implant a rogue employee IN the
   interesting target. "Woke" targets are much
   easier because they won't dare press any
   credential stuff for 'brown-ish" applicants.

[toc] | [prev] | [next] | [standalone]

#93465

On 12/10/2026 05:24, Woozy Song wrote:
> My bank authenticator app prohibits PINs such as 1234 (or 2580 which is 
> all digits in a line on keypad)

I am still using the same PIN that I was first issued so long ago I cant 
remember when


-- 
The New Left are the people they warned you about.

[toc] | [prev] | [next] | [standalone]

#93462

c186282 wrote:

> the company linked to a major breach of Denmark’s CPR register

I'm pretty sure CPR means "cardiopulmonary resuscitation" to more people 
than it does "central person registry" ...

[toc] | [prev] | [next] | [standalone]

#93466

On 12/10/2026 08:49, Andy Burns wrote:
> 
> c186282 wrote:
> 
>> the company linked to a major breach of Denmark’s CPR register
> 
> I'm pretty sure CPR means "cardiopulmonary resuscitation" to more people 
> than it does "central person registry" ...
> 
Of course, but look who is writing...

-- 
The New Left are the people they warned you about.

[toc] | [prev] | [next] | [standalone]

#93523

On 2026-10-12, Andy Burns <usenet@andyburns.uk> wrote:

> c186282 wrote:
>
>> the company linked to a major breach of Denmark’s CPR register
>
> I'm pretty sure CPR means "cardiopulmonary resuscitation" to more people 
> than it does "central person registry" ...

Around here it's Canadian Pacific Railroad (although their merger
with Kansas City Southern means it's now more often called CPKC).

-- 
/~\  Charlie Gibbs                  |  In this world there are
\ /  <cgibbs@kltpzyxm.invalid>      |  two kinds of people:
 X   I'm really at ac.dekanfrus     |  1. Those who can extrapolate
/ \  if you read it the right way.  |  from incomplete data.

[toc] | [prev] | [next] | [standalone]

#93464

On 12/10/2026 02:48, c186282 wrote:
> Well ... if it's not easy to remember then they'll
>    write it on a Post-It and stick it to their monitor 🙂

Best sort of password is one you don't forget but is entirely 
unguesssable to the sort of
  people who might try to hack you.

I.Love.Trump

No intelligent hacker could bring themselves to type that.

-- 
The lifetime of any political organisation is about three years before 
its been subverted by the people it tried to warn you about.

Anon.

[toc] | [prev] | [next] | [standalone]

#93480

On 2026-10-12 11:31, The Natural Philosopher wrote:
> On 12/10/2026 02:48, c186282 wrote:
>> Well ... if it's not easy to remember then they'll
>>    write it on a Post-It and stick it to their monitor 🙂
> 
> Best sort of password is one you don't forget but is entirely 
> unguesssable to the sort of
>   people who might try to hack you.
> 
> I.Love.Trump
> 
> No intelligent hacker could bring themselves to type that.
> 

LOL :-D

-- 
Cheers, Carlos.
ES🇪🇸, EU🇪🇺;

[toc] | [prev] | [next] | [standalone]

#93520

On Sun, 11 Oct 2026 21:48:49 -0400
c186282 <c186282@nnada.net> wrote:

> At least three accounts at the company linked to a major
> breach of Denmark’s CPR register reportedly used the
> password “123456”, including an administrator account.

>    Seems that few giant hacks are like in the movies,

No, this is a classic Movie Hack, it's just that the movie in question
is "Spaceballs."

[toc] | [prev] | [next] | [standalone]

#93522

On 2026-10-12, John Ames <commodorejohn@gmail.com> wrote:

> On Sun, 11 Oct 2026 21:48:49 -0400
> c186282 <c186282@nnada.net> wrote:
>
>> At least three accounts at the company linked to a major
>> breach of Denmark’s CPR register reportedly used the
>> password “123456”, including an administrator account.
>
>>    Seems that few giant hacks are like in the movies,
>
> No, this is a classic Movie Hack, it's just that the movie in question
> is "Spaceballs."

My favourite movie hack (and the most realistic of them all)
was in "War Games", where our hero was sitting in the principal's
office after committing some infraction.  Next to him was a desk
with a computer terminal on it.  He pulled out the desk's writing
leaf, and sure enough, taped to it was a list of passwords.

-- 
/~\  Charlie Gibbs                  |  In this world there are
\ /  <cgibbs@kltpzyxm.invalid>      |  two kinds of people:
 X   I'm really at ac.dekanfrus     |  1. Those who can extrapolate
/ \  if you read it the right way.  |  from incomplete data.

[toc] | [prev] | [next] | [standalone]

#93628

On Mon, 12 Oct 2026 16:27:38 GMT, Charlie Gibbs wrote:

> My favourite movie hack (and the most realistic of them all) was in
> "War Games", where our hero was sitting in the principal's office
> after committing some infraction. Next to him was a desk with a
> computer terminal on it. He pulled out the desk's writing leaf, and
> sure enough, taped to it was a list of passwords.

The famous “Spaceballs” joke:
<https://www.youtube.com/watch?v=7rSmMm-7SVA>.

[toc] | [prev] | [next] | [standalone]

#93631

On 10/13/26 20:20, Lawrence D’Oliveiro wrote:
> On Mon, 12 Oct 2026 16:27:38 GMT, Charlie Gibbs wrote:
> 
>> My favourite movie hack (and the most realistic of them all) was in
>> "War Games", where our hero was sitting in the principal's office
>> after committing some infraction. Next to him was a desk with a
>> computer terminal on it. He pulled out the desk's writing leaf, and
>> sure enough, taped to it was a list of passwords.
> 
> The famous “Spaceballs” joke:
> <https://www.youtube.com/watch?v=7rSmMm-7SVA>.

   Been there, seen if often, sometimes 'mostly'.
   Computer stuff just CANNOT be too difficult
   for the average human worker. If it is you
   will watch them all walk out the front door
   or find ways to cheat the system.

   Some of the modern 'machine-generated' PWs,
   with all the weird punctuation characters,
   humans can barely even type them in properly
   even IF they've made a Post-IT.

   "Biometrics" ... there are a limited number of
   techniques and databases for those params. The
   nasty little hackers can GET at those. Then
   they've even stolen yer face/fingerprints.
   "Video-link" type stuff, now they're even
   stolen your 'kinetics'. DNA/protein stuff,
   again it's gonna be kept on one or more
   databases/backups somewhere. Who the fuck
   knows where the backups wind up ... some
   cheapo data center op in Uzbekistan ???

   It's a PROBLEM.

   If you are under 60 you can probably walk into
   a biz or govt office as proof of your existence.
   Anyone older, they may NOT be very 'mobile' alas.

   Can you see wheeling Mom or Granny into the Medicare
   office on a gurney with tubes and such attached ?

   Is the govt gonna hire lots of 'visiting reps'
   to go to THEM ? Nope, not even with 'socialism'
   (maybe LESS with 'socialism' based on the news
   I read from the UK). And how many 'visiting reps'
   will steal your info, or pry through the financial
   records in yer files while there or tell their
   thug boyfriends what/when/how to rob you ???

   It's a PROBLEM now, a BIG problem. "AI" will
   make it even worse, faster. Do NOT hear much
   in the way of sure solutions at all. May
   not BE any. Then what ?

[toc] | [prev] | [next] | [standalone]

#93630

On Mon, 12 Oct 2026 16:27:38 GMT, Charlie Gibbs wrote:

> My favourite movie hack (and the most realistic of them all) was in
> "War Games", where our hero was sitting in the principal's office
> after committing some infraction. Next to him was a desk with a
> computer terminal on it. He pulled out the desk's writing leaf, and
> sure enough, taped to it was a list of passwords.

Real-world example: US Air Force Minuteman missiles. Launch codes were
all set to “00000000”
<https://arstechnica.com/tech-policy/2013/12/launch-code-for-us-nukes-was-00000000-for-20-years/>.

[toc] | [prev] | [next] | [standalone]

#93632

On 10/13/26 20:49, Lawrence D’Oliveiro wrote:
> On Mon, 12 Oct 2026 16:27:38 GMT, Charlie Gibbs wrote:
> 
>> My favourite movie hack (and the most realistic of them all) was in
>> "War Games", where our hero was sitting in the principal's office
>> after committing some infraction. Next to him was a desk with a
>> computer terminal on it. He pulled out the desk's writing leaf, and
>> sure enough, taped to it was a list of passwords.
> 
> Real-world example: US Air Force Minuteman missiles. Launch codes were
> all set to “00000000”
> <https://arstechnica.com/tech-policy/2013/12/launch-code-for-us-nukes-was-00000000-for-20-years/>

   Read that. Maybe true. BELIEVABLE though.

   Sorry, you just CAN'T make it too difficult
   or odious for the humans.

   Oh, just replace all humans with AI then, right ?

   Who's running the AIs ??? Nobody seems to ask
   in any detail ....

   And when the AIs run themselves ... ???

   BTW, that's like NOW ... they can and with
   just a tiny bit extra latitude to 'save
   effort' and reduce the staff of annoying
   expensive humans .......

[toc] | [prev] | [next] | [standalone]

#93546 — Re: Idiots Rule [. . .]

Idiots do rule.
(S. HTTP://Gloucester.Insomnia247.NL/ fuer Kontaktdaten!)

[toc] | [prev] | [next] | [standalone]

#93563 — Re: Idiots Rule [. . .]

On 12/10/2026 21:33, Cóilín Nioclásín Glostéir wrote:
> Idiots do rule.
Tell me about it. Who else would *want* to?...

-- 
WOKE is an acronym... Without Originality, Knowledge or Education.

[toc] | [prev] | [next] | [standalone]

Page 1 of 2  [1] 2  Next page →

Back to top | Article view | comp.os.linux.misc

csiph-web