Discussion on question by sysfiend: Should I tell my boss I have discovered their passwords and they are too bad?

@Kevin This is not white-hat hacking! One of THE tenets of being a white hat is that you always ask for explicit permission before performing any kind of tests. This is the first thing that should be taught in any course on security.

Also, an anecdote. I am interning for a professor at a community college. He teaches Firewalls and Intrusion Detection. He has a speech at the beginning of the semester on TCPDump: "Do not run TCPDump on a server you do not own, or do not have written permission to do so on." Reason being, it is a federal offense to do so. Every year, there is at least one student who runs TCPdump on a different server on campus than the one that is allowed to have it run on. Do not be that student.

You do realize there's a link to your Linkedin in your profile and the profile shows your full name, as well as the company you're working for? I'd message the mods ASAP to delete this post unless you plan on sending it to the boss as a way of telling him.