Never heard of Shannon or her friend Maxim

from here

You can go on Google and find memes about spam, botnets, viruses, and ransomware, but when it comes to memes about Kerckhoff's Principle/Shannon's Maxim I'm pretty sure you're going to be coming here.

That's my personal work computer

found on Imgur

It never ceases to amaze me what people think they are entitled to do with company-owned hardware. Check out the Imgur link for this security tale, because it's got more details and other stories too.

Don't call me, I'll call you

from here

I do wonder if I gave the guy who called me a fair chance, but he made an unsolicited phone call to ask permission to send me email because he didn't want to send unsolicited email. Really, phone-guy?

He then pretended to know what my email address was. I don't know who thinks this stuff up but it's bananas. Presenting me with the wrong email address makes it clear to me that you didn't get my contact info from anyone who knows me and also that you are hoping that you either guessed right or that I'll follow the natural human inclination to correct someone when they're wrong. That's not gonna happen. Too many red flags. I'm not giving you my real email address or even the format we use for corporate email addresses at work. I don't want to click on whatever it is you were planning to send me. I don't want to take the chance that you're trying to penetrate our organization through either malware or social engineering.

Can you patch a plot hole?

posted to Instagram by James Lewis

Well that seems like a pretty glaring plot hole, although the show may have started around the time when the Silk Road was taken down by the authorities, so trust in the darknet may not have been high.

What are your GPS coordinates today?

from here

You don't necessarily need to have good OpSec in order to get on the 10 most wanted list, but you do need good OpSec to stay there. Just ask the guy who gave away his location with an Instagram post.

Them's the rules

found on Navy Memes

You'd think a weapon like that would at least need to be stored down in the hold in a secure container

On ALL of the computers that you maintain

from here

Before you tell me how you already run AV free on your own computer, take note of the title of the post. Do you have a computer at work? Do you have parents and/or children with computers? Right, go ahead and remove it from those too.

Bad Luck Marcus

found on Reddit

I didn't make this (believe it or not I'm quite a bit better at digital image manipulation than this) but when I stumbled across it while searching for memes I knew I just had to share it. Credit goes (I think) to Reddit user 98cwitr.

If you were going to choose a meme to modify in order to represent the absurd tribulations of Marcus Hutchins, then Bad Luck Brian seems like a perfect fit.

Do you want to play a game?

from here

Never underestimate the unusual ways that people view security concepts. Each person sees the world the the lens of their own unique experiences. Sometimes that isn't helping them and you point them down the correct path, but sometimes you might be the one with the crazy ideas and they're trying to set you straight.

Is there anyone this doesn't apply to?

found on Memegenerator

I suspect if you examine people's practices closely enough you'd find that most people (even security people) violate the principle of least privilege at least some of the time, Heck, Microsoft even went so far as to nerf the administrator account because they gave up on the idea of people only using admin sparingly. Does UAC now mean that people don't have to worry about least privilege anymore?  Does it give us a licence to be lazy about security? I don't know, but I'm going to continue using a non-admin account for day-to-day computing, regardless of the presence of UAC on my machine.