Never trust your attackers

from here and here

It's not the first time and it won't be the last time that ransomware operators proved themselves to be untrustworthy.  I know it's a tough position to be in, but if you get compromised you have to prepare for the possibility that the data will be leaked. Paying the people who attacked you to not make things worse has no guarantee of success. Why should they keep their word once they have what they want? It's not like they're honourable, they wouldn't have attacked you in the first place if they were.

I've got a reputation to protect

found on Reddit

I don't know about you, but I certainly use Google in incognito-mode. Not even specifically dumb questions, but all the time. One of these days I'm probably going to have to figure out how to make every browser window an incognito window.

A Facebook Challenger Appears

from here and here

It's hard to believe anyone could give Facebook a run for their money, but it sounds like Oracle is doing just that. Not in the context of social networking, however, but rather in the context of global surveillance.

It's difficult to imagine why Oracle would be interested in my political views and physical location, but I suppose those are details an authoritarian regime could use about it's citizens. 

How did the Enigma Machine work?

Watch on YouTube

I knew there were rotors in the Enigma machine, but this gave me so many more details. Could I build my own version after watching this? Maybe, but it's easier to just use computer software these days. Besides, the Enigma machine did eventually get cracked by the allied forces, so it wouldn't be secure even if you did build your own. It's still really interesting to see how complex it was.

The pitfalls of copy&paste

from here and here

When it comes to copying what you find online, I always advise people to learn from the code rather than simply copying it. Copying may be expedient, but it's risky too. If you don't understand the code you're copying then you run the risk of using it in inappropriate ways, including using compromised encryption keys like the folks at Hyundai appear to have done.

And don't let them stick to the wall

found on Reddit

Treating your passwords like your underwear is certainly fertile ground for humour, but it begs the question: do your passwords pass the sniff test? 

Transparency Theatre

from here and here

There are so many allegations made in this whistleblower complaint that subverting transparency reporting is really just the tip of the iceberg, but it certainly seems novel to me.

Respect My Privacy shirt

Product Page

Product Page

Asking that people respect your privacy is getting harder and harder these days, but how can anyone argue with a cute kitten flipping you the bird? 

You don't really think they're going to give those up, do you?

from here and here

The government is no more likely to hand over vulnerabilities for fixing than they are to lay down their arms, even though that makes us all less secure as a result. Don't count on their help to make software more secure when they have vested interest in it remaining vulnerable. 

Don't try anything fishy

found on Acid Cow

Security cat is going to be watching you swipe your card very carefully, so there better not be any funny business or things will get hairy.