Password Security

from here (source image)

Thanks to Kenn White for tweeting the demonstration of how badly ebay is handling password security. Apparently they can't even get password strength calculation right.

The Meaning Of Freedom In America

found on the meta picture

Seems like a perfect place for a surveillance camera if your plan is to link surveillance and national pride together.

eBay Fudd

from here (source image)

Inspired by eBay's response to my question about what algorithm they use.

link to tweet

And of course my response pointed them towards Kerckhoff's Principle because apparently they haven't a clue over there.

Safe Neighborhood

found on the meta picture

This is a much better deterrent than that Batman neighborhood watch sign from a while back. Nobody actually believes Batman is real, but drunks with guns? You betcha we believe.

Selfies

from here (source image)

Congratulations to whoever this guy is for finding a way to turn the latest craze in self-obsession into something more like the latest craze in the intelligence community's obsession.

Security To The Max

found on the meta picture

Wire cutters secured with a piece of wire. Think about, I'm sure you'll see problem.

I # Passwords (merchandise)

product link - category link

Well, I don't know about you but I'm getting tired of hearing about sites who apparently don't know the first thing about keeping passwords secure. So to raise awareness I made this design that says I # Passwords, and the hash symbol has the phrase "WORK FACTOR" all through it to represent a password hashing algorithm rather than a cryptographic hash algorithm (because for passwords you're better off with a work factor slowing things down than with a traditional cryptographic hash that's optimized for speed).

I've also learned my lesson about these shirt printing services so there's both a CafePress version and a Zazzle version.

I # PASSWORDS - Women's T-Shirts by secmeme
Make your own custom shirt design at Zazzle

Password Creation

found on the meta picture

I don't disagree with the caption, it is ridiculous. The rules (there to enforce password complexity, I'm sure) are too complex to follow. Worse still the maximum size limit and restriction on special characters tells me the passwords are probably stored as plain text instead of being hashed.

I sure hope it's just a gag and not a screenshot from a real site.

Wow, Such Hash, So Secure

from here

This is how passwords should be stored, as salted hashes that have a work factor, where there's no limit to how long the password can be nor on what characters it can contain. If you're running a website and not doing this then you need to ask yourself why, after all this time, are you still failing at password security? I'm looking at you, eBay.

Can You See Everything I'm Doing Now?

shared by Debra Covack

Welcome to the Surveillance States Of America. Feel free to share all your secrets online.