Monday, April 30, 2018

I could do that myself

from here

It seems to me that if you're a data recovery firm, the kind of attention you want from law enforcement is as a potential service provider, not a cybercrime investigation by the FBI that reveals you paid money to criminals.

Situational Awareness Fail


Watch on YouTube

Imagine being so enthralled by your partner that you don't even notice an armed robbery going on around you. Probably not a good thing, though it seems like they didn't suffer any ill consequences as a result.

Friday, April 27, 2018

Why not both?

from here

It's actually just hidden with steganography rather than encrypted, but I'm sure you could encrypt the data too.

Opportunity seems to be knocking an awful lot

found on Reddit

Thanks to my colleague Alex for sending this to me.

Thursday, April 26, 2018

There's no perfect crime without perfect OpSec

from here

Braggarts should maybe consider not committing crimes. It's in their nature to give themselves away.

What sharing means on Facebook

found on Huge LOL


Wednesday, April 25, 2018

Privacy - Let me google that for you

from here

Hard to believe in 2018 a company the size of Google could release a chat service with no end-to-end encryption. How out of touch do you have to be to do that now? These days a messaging application without encryption is a toy, not a product.

It's funny because it's true

found on Imgur

Data minimization is probably one of the most effective and least adopted means of protecting data. We've become far too accustomed to collecting every scrap of data we possibly can and it's hurting people in the long run.

Tuesday, April 24, 2018

Unfortunately bosses don't like to hear the word "No"

from here

For a long time people have been saying that security needs to align itself with the business when in reality it's the business that needs to align itself with security. If you're asking your security staff to open firewalls or make other sorts of exceptions instead of asking them for ways to do what you want to do securely then you are not helping the company be the best version of itself and are in fact increasing the chances of something bad happening.

Don't skip HMAC day

found in a personal directory under the Tor Project

Sometimes the memes are to make you really think about a concept, and other times it's just to introduce it to your "I've heard of that before" pile so that maybe at some point you'll wonder what all the fuss is about and google it.