Unclear on the Concept: Enterprise Security

So, the security organization says, “We need you to give us your root passwords so we scan your systems to see if they’re vulnerable to root exploits.”

“Just so I understand: you want the root passwords, so you can log in as root, to see if you can find exploits that would allow you to log in as root without a password.”


“If your goal is to get root without a password, then, by all means, start your attack. But I can’t give you the root password.“

“You’re not a team player and you’re not cooperating with our efforts! We’re going to HR!”

“Here, let me get you their phone number…”

25 years in the industry and, so far, not one detected security incident.