Wednesday, December 21, 2016

When all you have is an attacker mindset everything looks like a vuln

from here

While thinking like an attacker has it's benefits, don't lose sight of the bigger picture - preventing incidents. The act of thinking like an attacker should inform the way defense is carried out, not the way attacks are carried out, especially when the asymmetry of attack vs. defense already favours the attacker.

Unfortunately it seems many people don't appreciate the fact that vuln-centric models of security and incident-centric models of security compliment each other.

Beating swords into ploughshares

found on Slightly Warped

It's not always possible to prevent an attack. Sometimes all you can do is make the best of a bad situation.

I imagine these could have been reused as weapons but this is perhaps a better use. It certainly subverts the attackers intentions.

Tuesday, December 20, 2016

Who needs backdoors when techniques like this exist?

from here and here

Looks like criminals are going to need some new opsec in light of this new evidence gathering technique.

The man with the axe

found on The Grohl Troll Comics 

It's a funny pun, but in truth he's well equipped to perform DoS attacks of the low-tech variety.

Monday, December 19, 2016

My other security pass is a Harley

from here (source image)

It's amazing to me that someone actually built this security gate.

One more reason not to be a Grinch on Christmas


Watch on YouTube

Whoville isn't a real place and if you rip people off and take all their Christmas presents they're not going to sing about it, they're going to come after you.

Friday, December 16, 2016

Some devices need to get the axe

from here

There actually is something called a smart axe, but there aren't any electronics involved.

Yet.

I'm sure it's only a matter of time.

No victim is too small

found on Time Bounce

Some people think they have nothing a cyber criminal would want (maybe they never buy anything online, or they don't do online banking, etc.) and so don't worry about cyber security, but the truth is that if you have a computer that is connected to the Internet there are criminals out there who want to pwn you. That computer itself can be valuable as a tool for victimizing others.

Thursday, December 15, 2016

One of the many security benefits of deleting things

from here

Is Yahoo competing for the biggest breach? They've got to at least be in the running now, right? I almost feel bad for the state sponsored attackers who only got half that many accounts a year after this new breach is believed to have happened.

(Inspiration)

Privacy comes in many shapes and sizes

found on Distinguished Baloney

Protecting your privacy requires implies controlling access to your personal/private information, but for that to happen there needs to be forethought into how your personal/private information can be accessed. It's not always checkboxes on a screen or closing the drapes. There are all kinds of situations and all kinds of ways information can be uncovered. Don't be afraid to think outside the box.