So Now Reusing Passwords Is A Good Thing?

from here

How is anyone supposed to keep things straight in their head when there's so much conflicting (and sometimes down right ridiculous) advice out there. Like the idea that reusing passwords for low value sites is a good thing despite the obvious problem that most people wouldn't know how to tell a high value site from a low value one.

Sometimes I think people arrive at their security conclusions first and then search for ways to support them.

Don't Mess With This Dog

found on the meta picture

A guard dog with a machete is certainly enough to make me think twice about going someplace where I don't belong.

Nobody Has 100% Uptime

from here

Apparently LastPass users got a painful lesson in single points of failure. It's bad enough when a music or video game DRM server goes down, but when your password management site goes down you're locked out of everything.

Go On Sweety, I’ll Make Sure Nobody Sees Anything

found on the meta picture

Unfortunately, Granny is powerless against the awesome might of the ATM skimmer.

Chinese Cyber Spies Must Be Quaking In Their Boot Disks

from here

It's frustrating when a perfectly usable niche computer security term gets hyped so out of proportion that it stops meaning anything. The speculation that APTs possibly using less advanced (or even down right ordinary) techniques when that's all that's necessary is utterly pointless. If you can't out more mundane attackers then stop pretending you're fighting off the top of the attacker food chain.

Meet Jack. Or, What The Government Could Do With That Location Data

Did you really think location data was no big deal? Perhaps you'd like to reconsider that opinion.

You Designed Your Security Service Like A Phishing Campaign?

from here and here

I wonder if Hold Security understand how many ways they've done their identity compromise discovery service wrong.

The Problem With FaceRec On Phones

link to tweet

Thanks to Steven Metz for tweeting this joke. You were just joking, right Steven?

Can You Find The Dirty Password?

from here (source image)

Thanks to Matt King for tweeting the original photo. I have a feeling that at least some security researchers who look into password database breaches derive some puerile pleasure in finding things like this. I wonder if we all chose naughty passwords, would it make it more difficult for them to do presentations at security conferences?

0pen 5esame?

tweeted by Michael Pascoe

Thanks to Michael Pascoe for tweeting this cartoon about the pitfalls of the character replacement schemes people use to supposedly make passwords more secure.