#hacklore — Public Fediverse posts

@boblord FYI https://publications.cispa.de/articles/conference_contribution/Public_Wi-Fi_Security_and_the_Spread_of_Fear_Uncertainty_and_Doubt/31834648/1/files/63017911.pdf

#hacklore

@boblord

An excellent follow-up article from Bob to the #hacklore interview. I particularly like the focus on #SecureByDesign and questioning the need for bolt-on, aftermarket solutions to product failures.

https://medium.com/@boblord/why-hacklore-persists-and-how-we-replace-it-985ac1065a98

Cyber threats have evolved over time. If the calculated risk of a particular threat decreases, then our list of top to-do items should reflect the changing landscape. Today @boblord argues that some old advice should be retired as #Hacklore.

https://podcast.firewallsdontstopdragons.com/2026/02/02/debunking-hacklore/

Tune in Monday when I'll be debating the efficacy and wisdom of some oft-repeated security tips with cybersecurity guru @boblord - something he calls #Hacklore.

Subscribe here:
https://firewallsdontstopdragons.com/podcast/

🎁 🎄 🎅 All I want for Christmas is…
links to the #hacklore you keep seeing 👀

You know the advice. Everyone repeats it. No one questions it.

Send it my way, and spread the word: https://www.hacklore.org 🙏

I really do like the "Stop #Hacklore!" recommendations from https://www.hacklore.org/

However, in my opinion, they do ignore the gigantic #tracking threat on #privacy by the #Bluetooth tracker industry and the Multi-Billion-Dollar-Business of #DataBrokers sharing this data when they say that "turning off Bluetooth and NFC" is an "outdated advice".

For NFC I can not tell.

Unfortunately, most retail chains are using Bluetooth tracking and share their tracking with basically all others.

So my recommendation is: turn off at least Bluetooth any time you're not actively using it! Furthermore, I'd recommend people to randomize their #WiFi MAC address for unknown networks as well in their settings.

Modern Android has a neat feature to turn off Bluetooth when you're not using it for xx seconds/minutes. Use that and be aware that if you're walking through streets or shopping areas with your active BT headphones, you're being tracked all the time.

Oh, joy! Another ✉️ open letter ✉️ with all the groundbreaking insight of a fortune cookie. Instead of stopping "hacklore," this #manifesto merely excels at looping its own menu 🔄, ensuring readers are as lost as the author. But hey, at least they remembered to "spread the word." 📢
https://www.hacklore.org/letter #openletter #hacklore #fortune_cookie #lostinsight #HackerNews #ngated

I tapped my home network to see how much of my traffic was unencrypted… You’ll never believe the results! 😱 #Cybersecurity #Hacklore

https://medium.com/@boblord/attack-of-the-evil-baristas-b204436f0853

@lapt0r Same, though I don't remember where I heard it or if it would still hold true. For example, what would stop the APT from hitting you again after you rebooted?

Why not recommend rebooting daily or twice a day? Why weekly?

Sounds like #hacklore to me but I'm always willing to learn more and change my mind.

You know that advice to reboot your phone weekly to kill APT processes in RAM that are not launched from storage?

Where did that come from? Links welcome.

Why not also reboot your home routers, wi-fi, music systems, home assistants, etc?

Is this just #hacklore?

@brett #hacklore like this is hard to kill. Someone should get a degree studying this topic.

https://medium.com/@boblord/cybersecurity-hacklore-8a5be4e8fa3e

@brett I'm wondering more generally? The #hackLore never seems to die.

@webjedi I’ll check it out. Please post when it drops. I suspect this sort of retrospective is exactly what the industry needs. We tend to believe #hacklore more than we would like to admit.