faster is better but more is not

from here (source image)

3 updates in a single month seems a bit much, don't you think? yes it's important to fix vulnerabilities fast, but it's also important not to cause end user burn-out by releasing patches too often.

yoda logs all

originally tweeted by @Shpantzer

skimping on your investment into logging isn't going to save you any money when something happens and you need to know what that something was.

are you smarter than a trained monkey?

if you expect security that even a trained monkey could use, then you should expect to be replaced by a trained monkey

some folks seem to think they should be able to get a high amount of security with a low amount of effort. security ain't easy, folks, and it never will be. there are easy parts, of course, but you won't get very far in life if you only do the easy parts.

don't be that guy

yeah, nobody wants to be that guy.

there are how many booth babes?

from here

inspired by this tweet by bob rudis

come on, folks. can't you sell your security wares with excellence instead of sex?

mr. johnson, your computer is infected

found on google image search

funny how not only does it take hazmat suits to check an infected computer, it takes multiple people as well. that's not the kind of backup you need in this situation.

java, why can't i quit you?

uploaded here (really wish cheezburger wouldn't cover the bottom with their watermark)

seems like every day is zero day where java is concerned

suki the hacker

yes it's a commercial, and yes it's got some "security solved" nonsense at the end, but it also demonstrates (perhaps not all that inaccurately) how bad some organizations' security is, especially when it comes to industrial control systems. at least some of the time it really is kids who are responsible for the computer attacks you hear about in the news (though perhaps not quite as young as suki).

in my day we had to scan everything by hand both ways

from here

i mean no disrespect to anyone but even though most people (even the pros) think they know and have a handle on AV, the fact is that ignorance of AV is both rampant and profound.

absurdity rules

tweeted by @BrittneyJordan

password complexity rules often seem this absurd to people who are less technical