This, coupled with ease of use, is what makes this a serious security problem. Sources of Default Password Information Despite of the serious security risk that this security loophole poses, this intelligence is easy to acquire. The most useful sources are vendor manuals, computer books, a number of Internet sources, and on-line vendor documentation. Vendor Manuals Vendor sometimes publish default passwords in their documentation. Although DEC removed this reference from its manuals, the password for this account remained the same and was valid for years later.
Vendors still publish default passwords, but now on the Internet.
On-line system documentation is the latest iteration of vendor published default password information. Many manufacturers, systems integrators, and other vendors post documentation on their Internet web pages to support customers. Computer Books Computer books published to supplement vendor documentation are a second source of default information. These books can be found in any large bookstore, libraries, and on Internet bookseller sites. These books are particularly useful for uncovering defaults for personal computers, client server systems and databases, and network operating systems.