Garmin Hit by Ransomware

I couldn't upload my run this morning... turns out Garmin is dealing with a ransomware attack.

DCRainmaker has posted instructions for manually uploading data.

Logging

This is one of my favorite old locks, used to secure registered mail containers. It can be picked, but that’s not the main security function. It has a counter that advances whenever it’s opened, making it difficult steal mail undetected. It’s essentially a re-usable seal. pic.twitter.com/q9IzoPtQEu

— matt blaze (@mattblaze) February 6, 2019

Alexa Controlled Microwave

I think I'd really rather have the voice-control built in to the microwave - requiring proximity - instead of being able to yell at an Echo have it issue commands via the cloud. But if you want an Alexa Controlled Microwave you can order it from Amazon for $155 - which includes an Echo Dot.

Mb2.r5oHf-0t

IT experts name Mb2.r5oHf-0t as world’s safest password. 

Compromised Passwords

Troy's updated his site, Pwned Passwords. Read the details here to see if you want to trust it with testing your password.

I couldn't easily find it, but I thought I had shared his other service: Have I Been Pwned? You provide your e-mail address and it will let you know if it is found in any of several data breach databases dumps. You can also get alerts if your e-mail address shows up in a future breach.

WPA3

WPA3 coming - anything to improve wireless security is good news!

Voice Control Security

I love my Echo, but the attack vectors are scary...

Turns out hackers can take control of Siri and Alexa by "whispering" to them in frequencies humans can’t hear. https://t.co/TMTw1BjGLB

— Fast Company (@FastCompany) September 6, 2017

Via @Jruys

Cameras

I'm thinking about picking up this camera solution - Arlo Pro Security System with Siren – 3 Rechargeable Wire-Free HD Cameras with Audio, Indoor/Outdoor, Night Vision (VMS4330).

One key feature of these cameras is that they are battery powered/wireless. It makes for an easy deployment since you don't have to run wires everywhere. (Obviously you will have to periodically charge the batteries, but I have a friend that has been very pleased with the battery life.)

The system includes 7 days of cloud storage, so you don't have to worry about local storage. The software seems pretty slick, too.

Security Questions

Coincidentally, my first pet's name was 90 2e 04 70 1e 41 89 2b ad 53 96 86 99 d5 65 e5 83 5a 5b 51.

How to fill out security questions. pic.twitter.com/sOwxv9LgJO

— Chris Gilbert (@chriswithpants) August 30, 2016

TSA Compliant

This is not the tool you are looking for...

My modified multitool made it through two airports today! It may help that I laser etched "TSA Compliant" on it. pic.twitter.com/eOXwCfzOsw

— John Edgar Park (@johnedgarpark) March 17, 2016

Via @travisgoodspeed

Complex, No Common Names with 50+ Characters

"Choose password" > 123bob "Password must not contain common names & must be complex with at least 50 characters" > gameofthrones "OK"

— Terry F (@daemonic3) June 4, 2014

Security Theater Theater

Only posting because I wanted to call it Security Theater Theater.

Ouch

Painfully funny.

China now doing the biggest SQL join in history. #AshleyMadison #OPMhack

— David Burge (@iowahawkblog) July 20, 2015

No More Cert Renewals

What a great way to save some money!

How not to deal with an expired SSL Certificate http://t.co/h5U9qWm8PT pic.twitter.com/FehGNvQsF8
— SERVERTASTIC (@servertastic) April 9, 2015

Patching

I like this quote:

“You can’t patch people. They want to be helpful. So train them.” @swordshieldsec #knoxcybersummit
— Clarisntwrks (@ClarisNtwrks) February 5, 2015

Tactical Drone

You too can own a tactical drone for penetrating the White House perimeter.

It is apparently very popular. (#10 on the list at the time of this post.)

WarSting

WarSting: A Wi-Fi scanning sword for Hobbits:




Via Slashdot.org

Upside Down

So Apple had to pull back the iOS 8.0.1 update. And now there is the Shellshock BASH vulnerability.

Time to upgrade your Mac or Linux box to Windows for a secure computing environment!

Schneier Sherlock Cross-over

Too funny.

Game of Thrones OpSec

An isolated computer - no network connectivity. I wonder how many WordStar 4.0 viruses there are out there?