privacy awareness win

from allytibbitt's flickr stream

some people think privacy is dead because nobody cares about it anymore. clearly more people care about it than some might like to admit. a concern for privacy is clearly still part of the public consciousness.

what failure to understand protection looks like

from bordom.net

oh, if only there were some sort of head mounted sun-blocker so that he wouldn't have to hold his hand up like that through out the entire game.

Y U No Remember Password?

from memebase

alright, who's a frustrated tech support person?

scammy UI fail

from the art of trolling

i've always hated those pop-ups that try to plead with me not to leave the current page. i've always thought there must be something unsavoury about the page if they have to do that (like emails that start with the words "you don't know me but..."). it's funny to see one that is so shoddy in it's construction that the button it asks you to press in order to stay isn't even present.

make believe security

from game maker chronicles (thanks to paperghost for the find)

although the compromise after compromise after compromise seems to finally be over for sony, the underlying story isn't. we'll have to wait and see what comes out of the law suits, and whether the share holders can force the CEO to step down. the accusation that they fired a bunch of security staff before the problems began is very interesting though.

keep your car on a short leash

from that will buff out

once again people are using the bicycle security model on a car. considering how poorly that works for bicycles (they do get stolen a lot) maybe folks should rethink using this approach on cars.

keeping a lid on things

from there i fixed it

i'm not really sure what they're trying to 'secure' here. it seems like an extreme measure. i almost want to take a hammer to the tank to find out what they've got hidden i there - and that makes this a security fail.

they're either using security tools inappropriately (where security isn't needed) or they're trying to secure the unsecurable (locking the door of a glass house).

stop forwarding that crap to me

thanks to weird al yankovic for this awesome song (and thanks to mikko hypponen for drawing my attention to it's existence)

there are all sorts of things in the song that ring true, from hoaxes to chain letters to social engineering to the importance of BCC:. from your lips to their ears, al. i hope it wakes some people up.

if you think the word "indestructible"...

if you think the word "indestructible" has any place being used to describe malware then you might be a security idiot.

(inspiration)

well you can't beat that

from virtual shackles

so if leaking user info really is the goal there are 2 obvious ways to go about it. break into an organization, steal their data, and post it on pastebin like lulzsec did - OR - get hired by an organization which makes leaking user info part of it's business model. what an elegant solution.