Showing posts with label facepalm. Show all posts
Showing posts with label facepalm. Show all posts

Thursday, March 10, 2022

Self Denial Of Service

from here and here

Epic self-owns aren't exactly what you expect from a militaristic world power, but I guess Russia isn't what it used to be.

Wednesday, October 23, 2019

Credentials that strain credulity

from here

No, I'm not fucking with you, they actually used those credentials for a web portal for managing credit disputes. These people are too stupid to be allowed to hoard the nation's credit information.

Monday, September 2, 2019

Best practice meets worst practice

from here

For all the good XKCD did in teaching people to use passphrases, they went and cancelled it out by using MD5 to hash them with. MD5 has been deprecated for over 20 years, and it was never good for passwords.

Thanks to Have I Been Pwned for raising awareness of both the breach and the bad practice.

Wednesday, April 17, 2019

A commercial said it so it must be true

found on Imgflip

Even though there are viruses for the Mac (and there were even when that stupid commercial came out) there are still people who believe this malarkey. Apple's misguided marketing will do incalculable harm because there's no telling when or even if this false belief will ever end.

Wednesday, April 10, 2019

What could possibly go wrong?

from here

How long have we been telling people not to stick strange USB devices into their computers? How many ways have we tried to say it? Not enough, apparently.

Wednesday, March 6, 2019

I be they "take your privacy and security seriously" too

from here

If you follow many InfoSec pros on Twitter you've probably heard of at least one example of this recently, but I gather it's not an isolated incident so I'll refrain from singling a single entity out when many are to blame.

Wednesday, May 10, 2017

It's hard to do passwords worse than this

found on Kappit

It's hard, but it's not impossible. A SQL injection vulnerability in the password field would be worse, however treating it as a SQL injection vulnerability first and blocking "special characters" would be the wrong solution. There can be no SQL injection vulnerability if the data the user inputs isn't the data that gets put in the database - so hash your passwords!

As for the complexity requirements, everything other than length is basically garbage that makes passwords worse by making them less user friendly (and so more likely to be reused or posted on a screen or wall) and easier for a computer to guess because it actually removes many of the possible combinations.

Friday, February 5, 2016

You Learn Something New Every Day

found on funny junk

This demonstrates both tool specialization (it's not a general purpose cop car but one with a very specialized use) as well as how to look like a dumbass by not understanding the proper way to use a tool.