Friday, April 29, 2022

Making a hash of it by not making a hash of it

from here and here

All the comments I've seen about this so far have assumed this was about end users, which is fair because most people are end users so of course they would see if from that perspective. In reality, though, this is about system designers/architects. You know, the people who make sites and are supposed to hash your password rather than storing the plain text (or reversibly encrypted) version of it? Yeah, if that site says your password is too long it means they aren't hashing the passwords and so are doing it wrong.

In Case Of Fire: Pick Lock

found on Acid Cow

There better not be any unauthorized emergencies going on here. Those are strictly forbidden.

Thursday, April 28, 2022

Which country's flag will you fly today?

from here and here

I suppose this also applies if you're using the VPN to evade region locks enforced by streaming services. Don't let me stop you, though. Hoist the colours if that's your thing.

What it's like to get scammed


Watch on YouTube

The red flags are easier to see in hindsight. What you need to do is figure out how to see them in the moment.

Wednesday, April 27, 2022

Finally a good use for them

from here and here

The argument could be made that some members of congress essentially are terrorists, so maybe the TSA is actually fulfilling it's intended mission when it catches Madison Cawthorn with a gun.

An attempt was made

found on Reddit

Clearly they think this is going to deter burglars, but being "really big" with proportionately tiny feet isn't really the deterrent they think it is.

Tuesday, April 26, 2022

What is xyz.exe?

from here and here

Never mind the annoyance at seeing these new binaries popping up at regular intervals, there's also the issue of investigative fatigue and the diminishing value skepticism has when most of the new binaries your security software alerts you to are just additional Microsoft detritus that came in on the most recent Windows Update.

It's Not Gay If It's TSA shirt


Product Page

We've seen a similar design before but I can't actually find that specific design anywhere. This one is pretty good too, though, and now you too can be an air-passenger hero by proudly wearing this shirt the next time you present your junk for inspection.

Monday, April 25, 2022

Plain text is the best text

from my inbox

Lots of people and organizations have difficulty doing email properly, and scammers are no exception. Everyone is so focused on the HTML portion of the email they forget about the plain text version and you often find things you weren't supposed to see; whether it be the true URL (as seen above it's entirely wrong and totally suspicious) that is often disguised in the HTML email, or what appears to have been a place-holder for a URL in what I can only imagine was some kind of scam template. 

Nice of them to give it such a helpful label.

When Harry Met Fido

found on Dump A Day

Are you not deterred? I know I am.