Tuesday, May 31, 2022

Bitcoin can't unfry a hard drive

from here and here

While it's true that some ransomware operators have incorporated blackmail into their business model so that simply restoring from backups is no longer sufficient to resolve the incident, many if not most victims still seem to be unwilling or unable to recover from backups. It's as if they think ransomware is all they need to worry about and they can simply pay the ransom to get their data back, as if that's just the cost of doing business. 

That cryptocurrency won't uncrush a laptop, it won't unflood an office, it won't stop a fire, or any of the other sorts of disasters that really would benefit from backups. Backups are still the best way to get your data back.

EICAR Standard Antivirus Test QR Code case

Product Page

Now you never have to go hunting for the EICAR Standard Antivirus Test File again. You can just take your phone out of the case, scan the case with your phone, and then send the result to whatever needed the EICAR string. 

Monday, May 30, 2022

No cell phone number for you!

from here and here

Twitter isn't even the first company to get caught misusing security contact information for ad targeting, but at least they're paying the price for misusing our info. 

And that's your first lesson

found on Izismile

Don't expect a refund since you learned the material even without a physical book in your hands.

Friday, May 27, 2022

Threat modeling gone wrong

from here and here

It's amazing that the US has tighter restrictions on Kinder Surprise Eggs (not to be confused with Kinder Joy Eggs) than they do on assault rifles. I wonder how the deliberations for that went. Do you think if there was a chocolate lobby as powerful as the gun lobby that there would be a constitutional amendment guaranteeing the right to bare treats? 

Have fun with passwordless authentication

found on Reddit

They've been trying to get rid of passwords for years, opting instead for things like your phone (as a token) or biometrics, or both. Unfortunately alternatives to passwords require additional hardware and just aren't as reliable as passwords.

Thursday, May 26, 2022

When there are extra antennas that don't improve call quality

from here and here (image source)

I'm sure the little feet touching your face will give it away in this case, but extra antennas (if you're willing to open it up and look) is a bit more generic.

Credit card tap and go is risky


Watch on YouTube

Now you might be thinking that you'd notice someone walking around with a point of sale terminal like that, but what if they aren't carrying it in their hands? What if it was in a large purse or duffle bag?

Wednesday, May 25, 2022

Now anyone can come from the land down under

from here and here

I'm sure I've dated myself with that title, but as badly as the person who thought a 4 digit encryption key was strong enough. They were clearly from far, far in the past. 

Cryptocurrency, Not Even Once

found on Reddit

I wonder if anyone has ever examined the crypto bro phenomenon from the perspective of substance abuse. They certainly seem to have a problem that they need to admit to in order to get help.