http://blogs.technet.com/canitpro/archive/2007/06/21/guest-blogger-top-10-security-mistakes.aspxI saw Brian Bourne give this presentation at Energize IT and asked to have it written up as a guest blog post. Over the past few years his company, CMS Consulting, has been doing security audits and this lead to their list of top 10 mistakes. --------------------------------------------------en-CACommunityServer 2.1 SP1 (Build: 61025.2)http://blogs.technet.com/canitpro/archive/2007/06/21/guest-blogger-top-10-security-mistakes.aspx#1318747Fri, 22 Jun 2007 03:29:20 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:1318747Sean Kearney<P>Best password a customer came up with (when told he had to start using an Uppercase/Lowercase/Numeric involved a couple of "special" 4 letter words and a number. &nbsp; </P> <P>Boss said "as long as one of those letters is capitalized, yes"</P>http://blogs.technet.com/canitpro/archive/2007/06/21/guest-blogger-top-10-security-mistakes.aspx#1320010Fri, 22 Jun 2007 07:01:40 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:1320010Sean Kearney<p>The fingerprint reader is an interesting way to stick your kids with a ridiculously long password so they can only get in one way.</p> <p>If implement it I will probably have war at my house, or a lot of bruised fingers.</p>