Wednesday, October 31, 2018

If it's FIPS I sips

from here

Having recently become constrained by FIPS 140-2 compliance I found myself wondering "How am I supposed to hash passwords?". Then I wondered "How have other FIPS 140-2 compliant vendors been hashing passwords?" - and then I thought of the most obvious answer* and all the breaches of government systems seemed a lot less surprising.

(*Using a cryptographic hash instead of a password hash)

TSA Agent Halloween Costume

found on Halloween Costumes

I'm not sure which is easier, getting a TSA costume from an online store, or getting job with the TSA in order to get their uniform. Give them a try and tell me how it works out.

Tuesday, October 30, 2018

The objectionable object lesson

from here

I've never done this (to a phone*), but I ... know a guy tries to teach people a lesson about mobile security.

(*I can't say I've never changed the wallpaper on an unlocked desktop computer)

Always lock your computer

found on Quora

What he reads can and will be used against you in the room of baths.

Monday, October 29, 2018

This is the faux-lice, we have you surrounded

from here

It's amazing who gets to carry a badge and a gun in Michigan. About as amazing as seeing anti-malware companies teaming up with malware vendors, and I imagine there will be just as much done about it - absolutely nothing.

Sometimes car thieves are the least of your worries

found on Me.me

From what I've been able to gather, this is at least partially true. People do leave their car doors unlocked in Churchill for just this reason. I'm not sure if there's an actual law about it (I am not a lawyer), but the fact that it's even a custom demonstrates how threat models can change depending on the prevailing circumstances.

Friday, October 26, 2018

If you really don't want to be noticed

from here (source image 1 and 2)

There's a weird kind of irony in the fact that people wearing high visibility vests somehow become basically invisible. No one watches or pays any attention to them.

Someone should sell these

found on Silicon Investor

Someone should sell these because not all of us are gifted with the graphic design skills necessary to do this convincingly

Thursday, October 25, 2018

All trademark and no tradecraft

from here

Governmental spyware vendors keep getting breached (as does everyone else), but nothing quite compares to the spectacular self-own by Wolf Intelligence. A shame their customers victims were also exposed in the process.

Don't bring a spray can to a bong fight


Watch on YouTube

I'm not sure what was IN the spray can, but it looks like it might as well have been air freshener. Clearly not a winning attack strategy. Someone isn't having a very happy Marijuanukah.