#securitythroughobscurity — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #securitythroughobscurity, aggregated by home.social.
-
The following rules apply for user passwords:
* Passwords must be changed every year
* Passwords are checked against a list of known weak passwords
* Previously used passwords must not be reused
* Passwords must be at least 16 characters long
* Passwords must consist of at least three of the following groups
* lower case letters
* upper case letters
* digits
* emojis coding for emotion
* mostly red emojis
* one half of the simplified Japanese alphabet
* symbols that conjure Lucifer
* Passwords must neither begin or end with a number (because, why not?)
* Passwords must not contain the name of your mom
* Passwords must not contain any words of our secret "dictionary" (like the name of the company but also Football Clubs' deputy managers' wife's/husband's nicknames)
* Passwords sum of the characters' UTF codes must be divisible by seven, 11 or any prime number larger than 1000.On the bright side: Typing your password *is* still working time, so you get paid. You can also now clame a law degree on your CV.
#ActiveDirectory #SecurityThroughObscurity #Passwords #PasswordPolicy
-
Microsoft is limiting China's access to information about cybersecurity flaws. What are the chances that this will actually help limit attacks, rather than just siloing off more companies?
#cybersecurity #securitythroughobscurity
https://seekingalpha.com/news/4487721-microsoft-curbs-chinese-access-to-cybersecurity-flaw-data -
The first thing that would have to happen is a party, any party, in Canada aside from the Bloc would have to include transitioning to an independent Republic in their party platform.
I don't see that happening unless some sort of outside force/event occurs that makes it a current and immediate issue in the public sphere.
At this point I think most Canadians are open to the idea but it's not a priority.
#Uninteresting #SecurityThroughObscurity #Canada #UK #CanPoli #RepublicOfCanada -
The first thing that would have to happen is a party, any party, in Canada aside from the Bloc would have to include transitioning to an independent Republic in their party platform.
I don't see that happening unless some sort of outside force/event occurs that makes it a current and immediate issue in the public sphere.
At this point I think most Canadians are open to the idea but it's not a priority.
#Uninteresting #SecurityThroughObscurity #Canada #UK #CanPoli #RepublicOfCanada -
The first thing that would have to happen is a party, any party, in Canada aside from the Bloc would have to include transitioning to an independent Republic in their party platform.
I don't see that happening unless some sort of outside force/event occurs that makes it a current and immediate issue in the public sphere.
At this point I think most Canadians are open to the idea but it's not a priority.
#Uninteresting #SecurityThroughObscurity #Canada #UK #CanPoli #RepublicOfCanada -
The first thing that would have to happen is a party, any party, in Canada aside from the Bloc would have to include transitioning to an independent Republic in their party platform.
I don't see that happening unless some sort of outside force/event occurs that makes it a current and immediate issue in the public sphere.
At this point I think most Canadians are open to the idea but it's not a priority.
#Uninteresting #SecurityThroughObscurity #Canada #UK #CanPoli #RepublicOfCanada -
The first thing that would have to happen is a party, any party, in Canada aside from the Bloc would have to include transitioning to an independent Republic in their party platform.
I don't see that happening unless some sort of outside force/event occurs that makes it a current and immediate issue in the public sphere.
At this point I think most Canadians are open to the idea but it's not a priority.
#Uninteresting #SecurityThroughObscurity #Canada #UK #CanPoli #RepublicOfCanada -
In other news... now that the United States Fascist Government isn't *actively* threatening Canada's sovereignty, the BBC is back to having no Canada-related articles on the top tier of its "US & Canada" section.
There is not a *single* story about Canada.
Even though the King is coming in less than a week.. lol.
I know it's not “the time”... but, why are we still a Monarchy…?
#Uninteresting #SecurityThroughObscurity #Canada #UK #CanPoli #RepublicOfCanada
https://www.bbc.com/news/us-canada -
In other news... now that the United States Fascist Government isn't *actively* threatening Canada's sovereignty, the BBC is back to having no Canada-related articles on the top tier of its "US & Canada" section.
There is not a *single* story about Canada.
Even though the King is coming in less than a week.. lol.
I know it's not “the time”... but, why are we still a Monarchy…?
#Uninteresting #SecurityThroughObscurity #Canada #UK #CanPoli #RepublicOfCanada
https://www.bbc.com/news/us-canada -
In other news... now that the United States Fascist Government isn't *actively* threatening Canada's sovereignty, the BBC is back to having no Canada-related articles on the top tier of its "US & Canada" section.
There is not a *single* story about Canada.
Even though the King is coming in less than a week.. lol.
I know it's not “the time”... but, why are we still a Monarchy…?
#Uninteresting #SecurityThroughObscurity #Canada #UK #CanPoli #RepublicOfCanada
https://www.bbc.com/news/us-canada -
In other news... now that the United States Fascist Government isn't *actively* threatening Canada's sovereignty, the BBC is back to having no Canada-related articles on the top tier of its "US & Canada" section.
There is not a *single* story about Canada.
Even though the King is coming in less than a week.. lol.
I know it's not “the time”... but, why are we still a Monarchy…?
#Uninteresting #SecurityThroughObscurity #Canada #UK #CanPoli #RepublicOfCanada
https://www.bbc.com/news/us-canada -
In other news... now that the United States Fascist Government isn't *actively* threatening Canada's sovereignty, the BBC is back to having no Canada-related articles on the top tier of its "US & Canada" section.
There is not a *single* story about Canada.
Even though the King is coming in less than a week.. lol.
I know it's not “the time”... but, why are we still a Monarchy…?
#Uninteresting #SecurityThroughObscurity #Canada #UK #CanPoli #RepublicOfCanada
https://www.bbc.com/news/us-canada -
I just remembered about port knocking, it is by far the most spy movie security-through-obscurity gate of cybersec
You must know the secret knock
...and of course now it's configured on my VPS on top of the usual SSH restrictions (no root login, attempt limit, PK auth, etc)
#ssh #linux #server #CyberSecurity #cybersec #securitythroughobscurity #securitybyobscurity
-
@Gte @counternotions I'm not a fan of of #SecurityThroughObscurity https://en.wikipedia.org/wiki/Security_through_obscurity
I'm closer to a partisan of the opposite.
-
Ticketmaster SafeTix Reverse-Engineered - Ticketmaster is having a rough time lately. Recently, a hacker named [Conduition] ... - https://hackaday.com/2024/07/11/ticketmaster-safetix-reverse-engineered/ #securitythroughobscurity #reverseengineering #internethacks #securityhacks #softwarehacks #concertticket #hashalgorithm #ticketmaster #news #totp
-
4-year campaign backdoored #iPhones using possibly the most advanced exploit ever
#Apple #iOS #MacOS #MMIO #ZeroDay #SecurityThroughObscurity #CyberSecurity #APT
https://arstechnica.com/?p=1992873 -
CW: Long thread/4
Making content for an algorithm is like having a boss that docks every paycheck because you broke rules that you are not allowed to know, because if you knew the rules, you'd figure out how to cheat without your boss catching you. Content moderation is the last place where #SecurityThroughObscurity is considered good practice:
https://doctorow.medium.com/como-is-infosec-307f87004563
4/
-
CW: Long thread/33
Amazon will doubtless claim that disclosing how those systems work will make it easier for spammers and scammers to game their way to the top of search results. We should be skeptical of this claim - content moderation is the last domain where anyone takes the bankrupt idea of #SecurityThroughObscurity seriously:
https://doctorow.medium.com/como-is-infosec-307f87004563
33/
-
Google's plummeting search quality made the company desperate to please its "activist investors"
https://doctorow.medium.com/googles-ai-hype-circle-6158804d1299
#SecurityThroughObscurity #SearchQuality #Enshittification #Google
-
Google's plummeting search quality made the company desperate to please its "activist investors"
https://doctorow.medium.com/googles-ai-hype-circle-6158804d1299
#SecurityThroughObscurity #SearchQuality #Enshittification #Google
-
Google's plummeting search quality made the company desperate to please its "activist investors"
https://doctorow.medium.com/googles-ai-hype-circle-6158804d1299
#SecurityThroughObscurity #SearchQuality #Enshittification #Google
-
Google's plummeting search quality made the company desperate to please its "activist investors"
https://doctorow.medium.com/googles-ai-hype-circle-6158804d1299
#SecurityThroughObscurity #SearchQuality #Enshittification #Google
-
Google's plummeting search quality made the company desperate to please its "activist investors"
https://doctorow.medium.com/googles-ai-hype-circle-6158804d1299
#SecurityThroughObscurity #SearchQuality #Enshittification #Google
-
CW: Long thread/32
Finally, there's the question of Proctorio's security. Proctorio argued that by publishing links to its educator materials, Linkletter weakened the security of its products. That is, they claim that if students know how the invigilation tool works, it stops working. This is the very definition of "#SecurityThroughObscurity," and it's a practice that every serious infosec professional rejects.
32/
-
@bragi @AirlineReporter @leo I guess there were only 9 versions and some dummy let a newspaper take and post a photo of them. #SecurityThroughObscurity 🙄
-
CW: Long thread/17
For one thing, the rules change all the time, as the platforms endlessly twiddle the knobs that determine what gets shown to whom:
https://doctorow.medium.com/twiddler-1b5c9690cce6
And they refuse to tell anyone what the rules are, because if they told you what the rules were, you'd be able to bypass them. #ContentModeration is the only #infosec domain where "#SecurityThroughObscurity" doesn't get laughed out of the room:
https://doctorow.medium.com/como-is-infosec-307f87004563
17/
-
CW: Long thread/21
Working for the platform can be like working for a boss who takes money out of every paycheck for all the rules you broke, but who won't tell you what those rules are because if he told you that, then you'd figure out how to break those rules without him noticing and docking your pay. #ContentModeration is the only domain where #SecurityThroughObscurity is considered a best practice:
https://doctorow.medium.com/como-is-infosec-307f87004563
21/
-
Speaking of companies: should internal resources be resolvable using external #DNS? What points should be considered in terms of #security, #operations and #risk #management?
Is using split DNS #SecurityThroughObscurity or prevention of information gathering?
-
@bignose yeah, that's probably fair. And also not having all the used subdomains listed is more of #SecurityThroughObscurity play, if I need to keep any of them secure, better do it regardless of of the the information about the existence of that subdomain being widely or narrowly distributed.
The "make a cert per subdomain" might be easy, while it also cuts against the "limit the number of moving pieces" aspect of administration, that I believe in (not to the extreme, but still).
-
@Beowulf Die müssen erstmal 20x mit diesem Konzept auf die Schnauze fallen.
Das muß jedes einzelne Mal sehr teuer und sehr massenmedienwirksam werden.
Und es muß jedes einzelne Mal absolut glasklar machen, daß #SecurityThroughObscurity nicht funktioniert und nie funktioniert hat.
Und jedes Mal muß die BNA von Großkonzernen wie Siemens und SAP juristisch auf den Sack kriegen wegen wissentlichen Einsatzes bekanntermaßen unsicherer Software, und jedes Mal müssen dafür hochrangige Köpfe rollen.
-
Hiding Links in Plain Sight with Bookmark Knocking - Have you ever been looking for a screwdriver, USB stick, or your keys, only to fin... - https://hackaday.com/2021/08/10/hiding-links-in-plain-sight-with-bookmark-knocking/ #securitythroughobscurity #securityhacks #softwarehacks #portknocking #obfuscation #javascript #security #base64
-
Security this Week: Racoons in My TLS, Bypassing Frontends, and Obscurity - Raccoon is the next flashy security flaw with a name, cute logo, and a website (and a PDF). Raccoo... - https://hackaday.com/2020/09/11/security-this-week-racoons-in-my-tls-bypassing-frontends-and-obscurity/ #securitythroughobscurity #thisweekinsecurity #hackadaycolumns #securityhacks #honeypot #raccoon #news
-
Tech Bro Uniform Meets Margaret Thatcher. Disruption Ensues. - A new exhibition in San Francisco makes art out of the Patagonia vest, the former prime minister o... more: https://www.nytimes.com/2020/01/14/style/Patagonia-vest-margaret-thatcher-art.html?emc=rss&partner=rss #securitythroughobscurity(exhibit) #altman-siegelgallery #sanfrancisco(calif) #fashionandapparel #salesforce.cominc #thatchermargareth #your-feed-fashion #incomeinequality #venturecapital #patagoniainc #benioffmarc #art
