`123456' password used in Danish CPR data breach(cphpost.dk)
407 points by baal80spam 3 days ago | 216 comments
tl;dr: Summary not available
HN Discussion:
  • ↑Systemic failure requires accountability across all levels, not just scapegoating individuals
  • ↑Shock and dismay at continued use of trivially weak passwords in important systems
  • ~Blame lies with the broader system design, including unmonitored database access and misuse of CPR numbers for authentication
  • ↑Third parties with registry access should face regular mandatory security audits like PCI compliance
  • •Technical skepticism about whether the weak-password account was actually active/exploitable