I feel safer already

from here and here

It probably shouldn't come as any great surprise that Twitter's new encrypted DMs are a mess. When you consider everything that's been going on at Twitter for the last several months, and also how difficult it is to get encryption right, it stands to reason that they may not really have the right talent for it anymore.

Not that that helps the users at all. If you're a high risk user you should probably treat Twitter's encrypted DMs as though they're not encrypted. If you aren't a high risk user, then you should probably treat them as if they're giving you a false sense of security.

Authentic fakes now for a low, low price of FREE

from here and here

I originally thought this verified fake Disney account had perhaps paid the $8 that Elon Musk wanted for blue checkmarks, but on closer reading it seems the account had a gold checkmark and those actually cost $1000. Or at least they're supposed to, however it appears some got handed out for free, so not only did Twitter not verify the account was an authentic representative of Disney, they didn't even verify the account owner was an authentic paying customer. 

Furthermore, it appears this isn't the only mistake they made. Accidentally "verifying" people who can't pay and who can't verify their phone number because they're dead means the entire verification process is fake. There is no authenticity here.

Because millions of existing examples aren't enough to learn from

from here

I don't know why people think making new educational malware makes any sense with the profoundly large amount of malware already out there, but they're out there.

All your base64s are belong to us

found on Meme Generator

I wish this wasn't real. I wish I could say that people who think that base64 encoding is the same as encryption were an urban legend, but the fact is I've seen people like that with my own eyes.

Just to be clear, if you try to protect data using base64 encoding, you're going to get pwned.

At Least You Can Rest Your Hand On It

from here (source image)

I suppose if you think only your hand can protect your eyes from the sun then at least you have a convenient place to rest it while you go about your day one-handed.

Fart Noises Will Be The Least Of Your Concerns

from here (source image)

And I thought the men's room in the metro toronto convention center was bad because their shiny, polished floor was reflective enough that you could see the junk of the man in the next stall. I suspect  you wouldn't need reflective floors in the restroom depicted above.

The "Idiot Cord" Of Authentication Mechanisms

from here

I think I've figured out why people still believe in biometrics. You can't forget or lose your own body parts. If you have no faith in your fellow human beings ability to use their brains at least enough to remember to carry a security token then this is the security mechanism you choose.

Well Somebody Got Sloppy

tweeted by Dave Lewis

Thanks to Dave Lewis for tweeting this meme expressing skepticism over the government's explanation of how they've attributed the Sony hack to North Korea. It's like, either they're a really scary cyber superpower as the government seems to want us to fear, or they're bumbling nincompoops who make stupid mistakes. It's hard to fear bumbling nincompoops, though.