New hacking tool: chocolate

[yankee]

By Munir Kotadia
ZDNet (UK)

A survey of office workers in London found that almost three quarters would reveal their network-access password in exchange for a bar of chocolate.

The survey was conducted by the organizers of Infosecurity Europe 2004, a security exhibition to be held in London next week. They offered 172 commuters at Liverpool Street Station a bar of chocolate if they would reveal their corporate password.

Surprisingly, 37 percent immediately agreed, while another 34 percent were persuaded to give up their secret access codes when the interviewer commented that it was most likely to be the name of their pet or their child.

Claire Sellick, event director for Infosecurity Europe 2004, said the results prove that employers are not educating their users about the importance of information security: "This comes down to poor training and procedures. Employers should make sure that their employees are aware of information security policies and that they are kept up-to-date," she said in a statement.

[highwizard]

I guess I started a bad trend in posting a slashdot article, that people feel they need to follow....

[phobal]

By Munir Kotadia
ZDNet (UK)

A survey of office workers in London found that almost three quarters would reveal their network-access password in exchange for a bar of chocolate.

The survey was conducted by the organizers of Infosecurity Europe 2004, a security exhibition to be held in London next week. They offered 172 commuters at Liverpool Street Station a bar of chocolate if they would reveal their corporate password.

Surprisingly, 37 percent immediately agreed, while another 34 percent were persuaded to give up their secret access codes when the interviewer commented that it was most likely to be the name of their pet or their child.

Claire Sellick, event director for Infosecurity Europe 2004, said the results prove that employers are not educating their users about the importance of information security: "This comes down to poor training and procedures. Employers should make sure that their employees are aware of information security policies and that they are kept up-to-date," she said in a statement.

I found it on the internet! It's gotta be true!

[Grifter]

I found it linked from Fark. Doesn't really say much and it's not well written.

[skroo]

You know... This may be my memory playing tricks on me, but I'm tempted to call bullshit on this. I seem to remember hearing about a similar 'study' 8-10 years ago while I was in college. This might be another case of urban legend slipping into accepted truth.

[renderman]

There was another 'study' on the register about a year ago proving the same thing, except they were giving away pens:

http://www.theregister.co.uk/2003/04...way_passwords/

Looks to be an annual survey done for Infosec Europe.

[ndex]

There were engineers within the hive at the Borg mothership who would fix bugs for chocolate... but that was quite a while ago.

[DEFCO-NeoTetris]

By Munir Kotadia
ZDNet (UK)

A survey of office workers in London found that almost three quarters would reveal their network-access password in exchange for a bar of chocolate.

The survey was conducted by the organizers of Infosecurity Europe 2004, a security exhibition to be held in London next week. They offered 172 commuters at Liverpool Street Station a bar of chocolate if they would reveal their corporate password.

Surprisingly, 37 percent immediately agreed, while another 34 percent were persuaded to give up their secret access codes when the interviewer commented that it was most likely to be the name of their pet or their child.

Claire Sellick, event director for Infosecurity Europe 2004, said the results prove that employers are not educating their users about the importance of information security: "This comes down to poor training and procedures. Employers should make sure that their employees are aware of information security policies and that they are kept up-to-date," she said in a statement.

I'd have to say that's one of the oldest tricks in the book.You should watch Take Down.That movie is exactly about these kinds of antics.Early hackers were spies.

[jesse]

you make my brain hurt, dude.

[phobal]

You know... This may be my memory playing tricks on me, but I'm tempted to call bullshit on this. I seem to remember hearing about a similar 'study' 8-10 years ago while I was in college. This might be another case of urban legend slipping into accepted truth.

Much like http://www.dhmo.org/
Ban Styrofoam cups!!!