The Danish social security system, CPR, suffered a major data breach exposing personal details of 8.8 million people. This occurred because a third-party company secured its access to the CPR database with an extremely weak password, "123456". The hacker exploited this vulnerability, gaining access and browsing the system for ten days before detection. The breach highlighted systemic issues with password security and the reliance on easily compromised personal identification numbers.Separately, the author expresses skepticism about blockchain technology, viewing it as a solution without a clear problem, with token trading being its primary application. Despite the common occurrence of blockchain companies being hacked, a recent supply chain attack on hardware wallet manufacturer Ledger is noteworthy. Attackers compromised devices during the supply chain, embedding hardware that could steal recovery codes displayed on the device's screen. This allowed them to abscond with approximately $100 million in cryptocurrency. The attack raises questions about the security of the supply chain and the thoroughness of inspections. Ultimately, the text emphasizes the inherent difficulty of security, particularly when relying on end-users or weak passwords.