Friday, July 30, 2010

how can i pwn thee? let me count the ways

found on Liquid Matrix blog

so, not only has this person given away their username and password to the entire world, allowing anyone to log onto twitter and pose as them, but they've also alerted everyone as to where they'll be at a particular time (so someone could either find them there or, more likely, find them absent from their home). might as well hang out a sign that says "want to rob me? i have an opening on the 29th at 4:30pm"

Thursday, July 29, 2010

what the bad guys think of the cloud

from Evil Inc comic

yeah, pretty much the more valuables you put in the cloud the more there is out there for the bad guys to purloin.

Wednesday, July 28, 2010

have passwords always been complicated?



there are a number of issues covered in this comedy skit, and i like how it highlights how gullible you have to be to fall for some of the attacks out there.

Tuesday, July 27, 2010

bike security fail

from Epic Losers

clearly some folks have as much difficulty with physical security are infosec people see with computer users.

Monday, July 26, 2010

Hijinks Ensue tackles rogue antimalware

from HijiNKS ENSUE

really, there's more to this than just the comic - you should read the associated blog entry as well. the artist/author has some well founded doubts about the entire concept of going to some arbitrary website and having it supposedly clean your computer.

Friday, July 23, 2010

when passwords meet car doors

from There, I Fixed It

the theory behind the captioning at There I Fixed It was that the gate latch was added to the car because the numeric code (see that panel above the door handle? that's for entering a passcode) is too hard to remember.

the thing is that the gate latch isn't a lock, it's a latch. if a latch alone was good enough the owner could simply close the door and not lock it (also, you can still use traditional keyed entry judging by the keyhole). it appears that this car door is in such a state of disrepair that it won't actually latch properly and needs to be held closed with this additional hardware. so the true moral of the story is that both security technology (the lock) and the infrastructure it works with (the door) need to be maintained or they won't do you any good.

Thursday, July 22, 2010

luigi's password


found on Gadi Evron's blog

yes, sometimes social engineering is that easy. be careful out there, you don't want to be the next luigi.