Weird News

I was NOT in the security department. The head of that department instituted a policy of changing the "root" password on our machines every 3 months... or anytime someone with root left the agency. Soon everyone was writing down all of the major systems passwords of the day and taping the list to their ID badges. That person also went to a major white hat / black hat conference to announce just how secure our agency was.

Long story short, they got "removed" after we were hacked... management came to me and said "how would you like to run security while we look for a replacement?" And, "what things would you do differently?"