Friday, January 6, 2017

Yelps in 3...2...1...

from here (source image)

Be careful with camouflage. Too much stealth can be hazardous to your health.

Don't interrupt me when I'm browsing

found on The Meta Picture

Apparently this was adapted from this blog post by Jonathan Nightingale. It is unfortunately true that users see security warnings as little more than interruptions to be bypassed as quickly as possible, but I don't think any change we make to the wording of those warnings will change that perception. That perception is more about users' expectations about the safety of computers and the Internet not matching up with reality, and we've spent a very long time building up those expectations.

Thursday, January 5, 2017

The 'convenience' of biometrics

from here

TouchID is often framed as a convenience, and I'm sure it is... until it isn't.

Thanks to Dave Lewis for sharing his hot tub problems (surely a subset of first world problems) on Twitter.

You didn't think he stopped at huffing and puffing, did you?

found on The Meta Picture

In the real world, attackers don't just use one kind of attack. If one doesn't work then they move on to the next one until they find something that works.

Wednesday, January 4, 2017

Do NOT ding this car

from here (source image)

There is no way that stops someone from getting in, but it sure as heck will stop someone from getting out.

When browser history isn't enough

found on Izismile

It would probably be better to encrypt your entire hard drive if you're that worried about it's contents. Then you wouldn't have to rely on someone else to get rid of the evidence.

Tuesday, January 3, 2017

To use AV or not to use AV, that is the question

from here

A few people make security-related internet memes. Fewer write song parodies. Fewer still limericks or poem parodies. Even fewer than that make animated videos, or clothing designs.

I see a lot of people doing security, but not so many making culture about it.

I feel left out too

found on Meme Generator

On the one hand everyone wants to be wanted, but on the other hand there are benefits to not being a target.

Monday, January 2, 2017

Even I don't know what it is

from here

If mind readers ever become a thing, I'll still be secure because my head will be empty... Wait a minute...

Everything is vulnerable to something

found on The Meta Picture

One of the traps some people fall into in vulnerability-centric security is the idea of eliminating all vulnerabilities. The reason it's a trap is that it can never actually be accomplished. There will always be vulnerabilities, no matter what we do.

[If you know where this comic originally came from (looks like it might be Japanese or something) let me know so I can update the attribution. Google image search was unfortunately not very helpful here.]