Some Vulnerabilities Really Shouldn't Come As A Surprise

from here

I'll be honest, I've never even heard of "wireless hard-drives" before (and even now I'm not sure what differentiates them from a wireless NAS), but as soon as I read those words in this vulnerability note I knew what was going on and that consumers had been taken in by the promise of false simplicity.

What's The Secret Password?

tweeted by @TheKnowledge

Thanks to @TheKnowledge for tweeting this security tale. I imagine that tokens, biometrics (where the kid actually knows the person sent to collect them), or even two factor authentication could work, but those all have additional hurdles that make them harder to implement than a simple password system.

Unattended Laptop Warning Card

Unattended Laptop Warning Card Pack Of Standard Business Cards by secmeme

Do you ever find yourself staring at someone's unattended laptop in an airport lounge or coffee shop or someplace equally public (as Christopher Soghoian apparently did)? Why not give the owner a reason to think twice about leaving it unattended again. Leave one of these business cards beside it.

I tried to create this product at CafePress in addition to Zazzle, but CafePress doesn't seem to allow you to sell business cards. You can make your own business cards there but not sell them for whatever reason. I could have gone with greeting cards or something like that but then the unit price would have been a great deal more, which goes against my aims.

As is my custom, the mark-up is set to the lowest possible value, which is 5% on Zazzle. I'm not sure if $27 for a pack of 100 cards is good or bad but I'm sure if you know someplace cheaper you can have your own printed off there (maybe you can even get a smaller amount since 100 seems a bit like overkill for this application). I don't think I even need to provide the 'artwork' for this design, since it's just text.

Blending In Fail

found on the meta picture

Mindlessly applying security concepts, such as camouflage, almost always has ridiculous results. As if that camouflage design is really going to make that building harder to see. If anything, it makes it stand out more.

If You Think A Toy Ring Is A Terrorist Threat...

from here (source image one and two)

If you think a toy ring is a terrorist threat, you might be a security idiot.

Inspired by this ridiculousness.

Also I'm changing up the format of the Security Idiot meme a bit. Although it still lends itself well to verbal retelling, the internet in general (and sites like twitter and facebook in particular) seem to lend themselves to captioned images (which is to say that captioned images seem to get more attention than simple text). What do you think of my choice for the security idiot portion? I think this picture @DFIRob pointed out to me ages ago works quite well to represent a security idiot.

Airport Security Vs The Nobel Prize

found on the scientific american blog

Apparently you can be one of the smartest people in the world and still have problems with airport security. I think that means there's a problem with airport security.

Anything Can Be A Personnel Carrier If You're Brave Enough

from here (source image)

Whether they're the military, the police, or just the IT department, if we expect them to protect us then they need to be given the resources necessary to do so.

Hack Attack?

tweeted by @jadamcrain

Thanks to @jadamcrain for tweeting this meme expressing frustration over the use of the phrase "hack attack" which has a variety of problems and could probably be better expressed by using the term breach or attempted breach.

Now They Won't Even Want To Touch Them

from here (source image one and two)

I'm sure there's some segment of the population that will tell you that the USB ports are actually for recharging your device (then why are there 2?), but I prefer the idea of giving users a more visceral reason to second guess their impulse to pick up strange USB drives they find on the ground.

Try as I might, I couldn't find a picture of that USB toilet without the "Problem SOLVED" caption, but that just forced me to get creative.

Putting Ashley Madison In Perspective

found on the chive

Well, this must be embarrassing for the 'dating' site (hard to call it that when so many of the women were bots - more like a scam site).