According to a survey by a password-management vendor, one in three IT administrators say that they or one of their colleagues have used their elevated privileges to peek in confidential or sensitive information at work. I guess basic human curiosity is hard to rein in, especially when given the opportunity with an anonymous admin password. There are other admissions in the poll too, such as writing privileged passwords on paper and not changing critical passwords.
"We asked these questions last year, too," said Adam Bosnian, vice president of product strategy and sales for Cyber-Ark, a Newton, Mass.-based maker of password file security management software. "And we got similar results. So on one hand, the results weren't surprising. What was surprising initially -- and this time around, too -- is that people admit to it."