Also cheaper than the alternative

from here

Equifax failed to apply patches. It's going to cost them over a billion dollars. Don't be like Equifax.

It's easy when nobody calls you

from here

Watching you, listening to you, tracking your location - imagine where the NSA would be today if mobile phones never caught on.

Just a little before starting

from here

I never actually installed those updates. I figured the chances of me being among the first to be targeted using exploits for those vulnerabilities would be really low, and that the code that would need to run in order to launch the exploits stood a good chance of being stopped by one of my whitelisting layers, so there was time to wait and see what the fallout from those far-reaching patches would be.

Using locally sourced bits

from here

You've probably never seen my keys

from here

Encryption is one of those weird things where, the more people use it the more usable it will become. It's kind of like a social networking site that way - it's not until lots of people are already using it that it becomes really useful.

Wireless is too mainstream

from here

I don't know the details at the time of writing this (because they haven't been released yet) but since I make it a point to avoid wifi I have a feeling I'm going to be safe from this.

Never heard of Shannon or her friend Maxim

from here

You can go on Google and find memes about spam, botnets, viruses, and ransomware, but when it comes to memes about Kerckhoff's Principle/Shannon's Maxim I'm pretty sure you're going to be coming here.

Why admin isn't always admin

from here

You know how nowadays when you want to run something that requires administrator access you have to right-click and choose "Run as administrator" even though you're already logged in as a user who is a member of the Administrators group? Yeah, Microsoft had to literally change how administrative users work because people couldn't be trusted to follow the principle of least privilege.

Setting up 2 accounts (a non-admin one for everyday use and an admin one for actual administration) was apparently too complicated for most people so now it's just assumed that everyone is running as admin so to get the REAL administrative you have to "Run as administrator".

V rira fcrnx va pbqr

from here

Can you guess what the title means? I'll give you 13 guesses and the first 12 don't count.

It's Called An 0-Day But You've Probably Never Heard Of It

from here

Could we call hackers "technologically advanced hipsters"? With a culture that covets errors nobody's ever seen before, it seems like an apt description.

Stoag Was Anything But Mainstream

from here

Inspired by one of the mistakes InfoSec Taylor Swift has made recently.

"Why isn't there malware for Linux?" Why would you target 2% of the market, who can't even afford to pay for actual software?
— InfoSec Taylor Swift (@SwiftOnSecurity) December 15, 2014

(What's that? Taylor knows better than to believe that statement? I never said the mistake was believing it)

Watch Out Guys, We're Dealing With A Security Hipster Over Here

from here

Sometimes, security people get so deep into themselves they become legends in their own minds.