Poor Password Choices
Look at this: McDonald’s chose the password “123456” for a major corporate system.
Comments
Anonymous • August 25, 2025 9:27 AM
@ThemePro
Andy Greenberg’s piece is from July 9, 2025. Sorry you can’t see article. Paradox.ai jumps on it somewhere around paragraph 5.
Krebs’ article with additional detail is July 17, 2025.
Uthor • August 25, 2025 9:39 AM
If I were them, I’d go with “whopper”. No one would guess that!
wiredog • August 25, 2025 9:49 AM
That’s amazing. I’ve got the same combination on my luggage.
Jerry Stern • August 25, 2025 9:56 AM
A better link to that topic:
https://krebsonsecurity.com/2025/07/poor-passwords-tattle-on-ai-hiring-bot-maker-paradox-ai/
wiredog • August 25, 2025 10:32 AM
They should use a passphrase. Something like:
two all beef patties special sauce lettuce cheese pickles onions on a sesame seed bun
jelo 117 • August 25, 2025 12:07 PM
As von Neumann said “Any one who considers arithmetical methods of producing random digits is, of course, in a state of sin. For, as has been pointed out several times, there is no such thing as a random number — there are only methods to produce random numbers, and a strict arithmetic procedure of course is not such a method.”
Have your pseudorandom number, just make sure it isn’t in the range of some low complexity function (where the function domain is included when measuring complexity).
lurker • August 25, 2025 2:27 PM
“It had not been logged into since 2019 and frankly, should have been decommissioned. …” [via Krebs]
“When will they ever learn … ” [via Pete Seeger]
Mexaly • August 25, 2025 2:45 PM
A century after Barnum,
the population has grown.
Now it’s about every six seconds.
Andrew • August 25, 2025 3:00 PM
A 3rd party developer’s test account on a 3rd party app … I believe the post should be calling out Paradox for hosting an app they developed with the mentioned highly privileged test account left active.
Clive Robinson • August 25, 2025 5:51 PM
I’m reminded of XKCD 221,
https://www.explainxkcd.com/wiki/index.php/221:_Random_Number
Dave • August 29, 2025 9:28 AM
Surely McDonalds should have commissioned their own pen test on any software they purchased?
Subscribe to comments on this entry
Leave a comment
Sidebar photo of Bruce Schneier by Joe MacInnis.
ThemePro • August 25, 2025 8:07 AM
Why cite a paywalled Wired puff piece instead of KrebsOnSecurity? Krebs actually did the work and correctly pointed the finger at Paradox, not customers like McD’s. Wired’s framing was misleading clickbait.