Friday, October 7, 2022

The biggest target takes the most hits

from here and here

Apparently Chrome has more than twice as many vulns this year as the next leading browser. I know more vulnerabilities doesn't necessarily mean Chrome is less secure than it's competitors. It has the most market share so it gets the most attention from people trying to find vulnerabilities. However, while that doesn't make it less secure, it does make it less safe. More attention from attackers (successful attention at that it appears) means that users of the software face more attacks than users of the alternative browser - and that has been the rationale behind using alternative software for a long time. If you're using something that has a smaller target on it's back, you're less likely to fall victim.

Attribution is hard

found on Izismile

If attribution of public privates is this difficult, just imagine how difficult attribution of cyber attacks is.

Thursday, October 6, 2022

It does make for an easier getaway

from here and here (source article)

It's either some very brave/brazen thieves, or it's an indictment on the quality of police work the local police force is capable of.  If they're so bad at their jobs that thieves don't fear getting caught then it's no wonder they do this.

Countermeasure Win


Watch on YouTube

This is why attackers have to be careful not to bite off more than they can chew. Their targets may have countermeasures that are surprisingly effective.

Wednesday, October 5, 2022

Look who thinks they won the browser wars

from here and here

Who's looking forward to seeing their ad blocker get lobotomized? That seems to be where we're headed if Google has it's way. It reminds me a little bit of the controversy over PatchGuard in Windows Vista years ago. A security mechanism was added to the system that blocked access to functionality that malware and security software alike made use of. 

Google's new extension system will basically be doing something similar, with ad blockers getting the short end of the stick. One of the big differences here, though, is that Google is the world's largest advertising company, so they will definitely have an incentive to not make exceptions for ad blockers, even though those are an important way to block malware online.

If ad blocking performance deteriorates too much in Google Chrome in comparison to other browsers, though, Google is going to start losing their dominant position in the browser market.

Are you not amazed?

found on Huge LOL

I'm not going to claim all pirated software is full of malware (that always seemed to be little more than a scare tactic), but there definitely was some tainted software out there, and being able to consistently avoid it (while still downloading) required some deliberate care. 

Tuesday, October 4, 2022

Trying to ensure it'll never be FULL of spyware

from here and here

People come up with all kinds of creative solutions when left to their own devices. They may not be good solutions, however. 

Your Smart Toaster Is In My Botnet mug

Product Page

This is a cute graphic, though this isn't the best viewing angle. I guess it just provides motivation to move and get a better look at it so you can read the caption under that angry little smart toaster.

Monday, October 3, 2022

MULTI FACTOR!

from here and here

I have had enough of these multifactor snakes on this multifactor plane.

Earliest depiction of the Trojan Horse

found on Izismile

The story of the Trojan Horse, whether or not it's apocryphal, is clearly a very powerful one that has stuck with us for a very long time.