No sinkholes for you

from here and here

As usual the bad guys are adapting to what the good guys are doing. You can't sinkhole a botnet if you can't predict what it's next command and control server address will be.

Someone Needs To Take Security 101

tweeted by Security Fails (apparent source image)

You'd think that the only ones failing at university would be the students, but apparently there are ways in which the administration fails too.

Wow, Such Hash, So Secure

from here

This is how passwords should be stored, as salted hashes that have a work factor, where there's no limit to how long the password can be nor on what characters it can contain. If you're running a website and not doing this then you need to ask yourself why, after all this time, are you still failing at password security? I'm looking at you, eBay.

Hardware tokens, so hassle, much expense

tweeted by Nick Owens

Thanks to Nick Owens for tweeting this doge meme pointing out some of the drawbacks of physical authentication tokens.

Such joke. No laugh.

found on techcrunch

Part of me find it hard to believe people actually took a crypto-currency named after an internet meme serious, but apparently there was enough money in dogecoins to make it worth stealing 21 million of them. Apparently that's about $12,000.