Crack (Recover) Passwords for Customer

[rtrahan]

What is the rule of thumb if a customer ask if you could recover their password either for Windows, Internet or Email. And if you do it, how can you verify they are the rightful owner of the laptop/desktop...

Thanks

[Crgky127]

You could ask for a receipt, but most people can't find it, so the next best thing is asking them to tell you about the contents. And don't be afraid to ask for a drivers license, as many people appreciate going that extra step (checking signatures on credit cards etc).

[dhrandy]

You could also make them sign some kind of waiver saying that they own the computer and your not responsible for any of the content or something like that.

[Blues]

Sign a waiver and have them allow you to photo copy thier ID such as a driver's license. This helps if it is reported stolen you have thier ID this also helps in that very common thing is for the user name to be the persons name if it doesn't match up then you might want to be a slight bit suspitious.

[rtrahan]

Thanks guys as always great support.

[starfireone]

Unless I knew them, I just would not crack it. Not worth it in the long run. I would just say No and than say Next customer in line. Thats my story and I'm keeping to it.

[TimeCode]

What is the rule of thumb if a customer ask if you could recover their password either for Windows, Internet or Email. And if you do it, how can you verify they are the rightful owner of the laptop/desktop...

Easy. Never ever do it for a first-time client. Only do it for well-known trusted clients. It is illegal (at least in California) to crack any password that isn't your own.

[mekon]

I ask them for some form of ID and then send them the passwords by 1st class recorded mail.

[Daifne]

When I get a call for this, I first tell them that I am required to report the serial number of the computer (almost always a laptop) to both the police and the manufacturer to check if the computer is stolen. I usually get a quick hangup. ;-)

[TimeCode]

When I get a call for this, I first tell them that I am required to report the serial number of the computer (almost always a laptop) to both the police and the manufacturer to check if the computer is stolen. I usually get a quick hangup. ;-)

LOL!!! That's great. Have you ever called the cops to alert them?

Sign a waiver and have them allow you to photo copy thier ID such as a driver's license. This helps if it is reported stolen you have thier ID this also helps in that very common thing is for the user name to be the persons name if it doesn't match up then you might want to be a slight bit suspitious.

No way!!! That totally incriminates you in a very binding manner. Even if it is legit its still against the law.

[Daifne]

LOL!!! That's great. Have you ever called the cops to alert them?

Nope. I don't have any information to give them at that point. If any of them do come through and actually have me do it, and I do discover that it's hot, you bet I would call.

I usually get these calls on Saturday and Sunday mornings. I suspect that they "bought" them at the bar the night before. I don't think most of them stole them themselves.

[TimeCode]

Nope. I don't have any information to give them at that point. If any of them do come through and actually have me do it, and I do discover that it's hot, you bet I would call.

I usually get these calls on Saturday and Sunday mornings. I suspect that they "bought" them at the bar the night before. I don't think most of them stole them themselves.

Gotcha, I use a cellphone so most numbers show up. That is why I asked. Saturday or Sunday? My phone is off. ;)

[Daifne]

Being a second shifter myself, I advertise that evenings and weekends are no problem. What I don't say is that I'll charge more for early mornings. ;-)

[TimeCode]

Being a second shifter myself, I advertise that evenings and weekends are no problem. What I don't say is that I'll charge more for early mornings. ;-)

You and I are exactly opposite. I would rather start work at 7:30 am and be done around 3:00 pm. I like my afternoons and evenings. :D

[Daifne]

You'd be a good business partner for me. ;-)

IF I'm up at 7:30, I'm in my office in my pajamas working on the machines I have in.

[TimeCode]

You'd be a good business partner for me. ;-)

IF I'm up at 7:30, I'm in my office in my pajamas working on the machines I have in.

Indeed. But a horrible life partner. I'm in bed by 9:30 every night. :o

And I do the same thing... I get out of bed and stumble into my office somewhere between 5:15 and 6:00. And I don't drink coffee. :eek:

[Blues]

TimeCode I was spitballing ideas for if you are going to do it what to do to CYA. I am not sure the laws of my location or his/her location in regards to password recovery. The primary thing would be find out if any laws for it exist to see if you can even legally offer it. I would say that checking the serial with vendor and law enforcement is also a good measure. I have not done this and have not been asked to so I haven't hashed it out for myself yet either.

[TimeCode]

TimeCode I was spitballing ideas for if you are going to do it what to do to CYA.

Gotcha... I had to read that sentence 4 times to figure out what you meant. ;)

You guys can do all the password cracking you want but I am going to keep it to only my loyal clients and even then, it will never be listed on an invoice.

[Daifne]

I've only done it twice now. The first time was for the family of a guy who died. I do know them personally. The second was for a regular business client who currently has a bad employee. She password protected the admin account on one of the machines to cover her Internet tracks. Unfortunately, he still hasn't learned that he needs to put a computer use policy in place...

[wideawake]

No.

Never.

The trust issue can bite you in the ass down the road.

You could also wind up in court testifying against a client.

If a person really needs to hack a password that bad, what I tell them is to bring it to the State Police and let them do it.