Monday, November 19, 2018

Size is what really matters

from here

This is, perhaps, a controversial take on Randy Abrams' post about password constraints, but I think it bears out. The more complexity constraints you enforce, the fewer passwords there are that can satisfy those constraints and the less time it takes to run through them all. If I enforced a set of constraints that were so strict that there were only 5 passwords left that would pass all the rules, you can bet those 5 passwords wouldn't be considered strong.

Another way of thinking about this is, password policies leak information about the passwords in the system - information about what all the passwords have in common (they all have a character from set X, Y, and Z). Leaking information about shared secrets doesn't improve the strength of those shared secrets.

Crooks will be giving thanks all the way to the bank

found on Make A Meme


Friday, November 16, 2018

The most unhackable man in the world

from here

I don't know why they would put someone who's never used a computer in charge of cybersecurity, but I can't imagine it's going to end well.

Breaches are coming

found on Make A Meme

No one is immune to security breaches. It can happen to everyone, but it doesn't have to happen today. Be careful what you click on.

Thursday, November 15, 2018

As if the world's biggest ad company cares about privacy

from here

Having reached the pinnacle of online invasiveness in the name of serving you increasingly relevant ads, and after gaining a foothold in the real world with their personal electronics, Google has now moved on to gathering data from entire cities. Try opting out of that.

That's a shitty way to keep a secret

found on Fail Blog

If a dumb idea works, then it's not really a dumb idea.

Wednesday, November 14, 2018

That escalated quickly

from here

Thanks to Graham Cluley for writing this story about someone who lost the password to their account on a bitcoin exchange and decided the best way to regain access was to send them an explosive device.

You'd be forgiven if you thought this sounded like the work of Florida Man, but apparently craziness can happen in other places too.

Have you ever questioned the nature of your reality?

found on Imgur

I've observed that CAPTCHAs seem to be getting harder, but it never occurred to me that there might be a different explanation.

Tuesday, November 13, 2018

Someone should get a refund

from here

Pretty sure the answer is no. Even if you argue that it was protected between the time it was leaked and the time it was cracked, that was only a couple of hours, and if it was that easy to crack then there was never really any meaningful protection there in the first place.

The war on math is fought on many fronts

found on Imgur (source article)

It's not just wishful thinking (and ridiculous demands) about secure crypto backdoors anymore. Now simply solving equations in public marks you as a suspicious character.