Practical obscurity is behind a LOT of today’s security sadly.
I have access to the exam system our law school uses as I co-administer it, there’s definitely a way to send people a raw text version of their password in emails. My boss also asks professors to write down their passwords on sticky notes so he can work on their PCs, this week I heard him give his SSO-connected admin account password to a faculty member over the phone, with the strict instructions she not use it for anything else. Smh. He’s a domain admin. Mmmkay.







Pants go down to ankles
Underwear go down to ankles
And then the helicopter starts up