He Was Arrested as a Russian Hacker, But The Truth Is Far Scarier ☠ Darknet Diaries Ep. 163: Ola
Source: YouTube · Jack Rhysider · published Sep 2, 2025 · 1:22:56
A university's security flaw allowed student accounts to be easily compromised with predictable credentials based on student names 0:00.
Key Takeaways:
• Computer science students at a university were given access to a central Linux computer with usernames as last names and passwords as first and last names 0:05
• This password policy created a critical vulnerability where anyone could access other students' accounts if they knew their full names 0:21
• When reported to the teacher, the security concern was dismissed as students should be changing their passwords 0:39
This story demonstrates how poor password policies can create severe security vulnerabilities in educational institutions.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
JACK: Hey, it’s Jack, host of the show. When
I was a teenager, I went to university and studied computer science. At one point they
gave all the students logins to some central Linux computer. It’s where you were supposed to do
your schoolwork. Like, you could use it for file storage or check e-mail there and do programming.
Well, when they gave me my username and password, they said my username is my last name and my
password is just my first and last name. I instantly realized this means if you know another
student’s full name, you know their username and password and can log in as them and read their
e-mails and look through their files and stuff. I told that to the teacher; hey, this is a
bad password policy. He’s like, why? I’m like, 'cause I know everyone’s password. He’s lik…