Y U No Remember Password?

from memebase

alright, who's a frustrated tech support person?

scammy UI fail

from the art of trolling

i've always hated those pop-ups that try to plead with me not to leave the current page. i've always thought there must be something unsavoury about the page if they have to do that (like emails that start with the words "you don't know me but..."). it's funny to see one that is so shoddy in it's construction that the button it asks you to press in order to stay isn't even present.

make believe security

from game maker chronicles (thanks to paperghost for the find)

although the compromise after compromise after compromise seems to finally be over for sony, the underlying story isn't. we'll have to wait and see what comes out of the law suits, and whether the share holders can force the CEO to step down. the accusation that they fired a bunch of security staff before the problems began is very interesting though.

keep your car on a short leash

from that will buff out

once again people are using the bicycle security model on a car. considering how poorly that works for bicycles (they do get stolen a lot) maybe folks should rethink using this approach on cars.

keeping a lid on things

from there i fixed it

i'm not really sure what they're trying to 'secure' here. it seems like an extreme measure. i almost want to take a hammer to the tank to find out what they've got hidden i there - and that makes this a security fail.

they're either using security tools inappropriately (where security isn't needed) or they're trying to secure the unsecurable (locking the door of a glass house).

stop forwarding that crap to me

thanks to weird al yankovic for this awesome song (and thanks to mikko hypponen for drawing my attention to it's existence)

there are all sorts of things in the song that ring true, from hoaxes to chain letters to social engineering to the importance of BCC:. from your lips to their ears, al. i hope it wakes some people up.

if you think the word "indestructible"...

if you think the word "indestructible" has any place being used to describe malware then you might be a security idiot.

(inspiration)

well you can't beat that

from virtual shackles

so if leaking user info really is the goal there are 2 obvious ways to go about it. break into an organization, steal their data, and post it on pastebin like lulzsec did - OR - get hired by an organization which makes leaking user info part of it's business model. what an elegant solution.

new infosec cartoons?

from infosuck.org

ridiculing the recent trend of trying to excuse bad behaviour by claiming the perpetrators have asperger's syndrome is an awesome idea and i wish i'd though of it.

i certainly hope the folks at infosuck keep making comics.  with all the ones they've already made, infosuck is definitely going on list of links to other media.

hitting it out of the park

thanks to pete lindstrom, pete lindstrom, and finally pete lindstrom

if this absurdity doesn't make sense to you, think about all those times people have said some security technology is failing because it's not 100% effective.