La Chronique de Dork
Ryan De Souza, writing at HackRead, provides a Chronicle of Dorkbot, maleware most pernicious; and it's announced temporary disruption. Better, I suppose, disrupted, than the alternative.
'Infosec has Failed and Continues to Fail', The Litany →
via CircleID member Gunter Ollmann, comes this superlative screed, calling on the past, to inform the future. How novel!
Random Darknet Shopper, Malware as Art... →
via the inimitable Cyrus Farivar, writing at Ars Technica, comes this sorry tale of crimeware most-foul, masquerading as art, or is it vice-versa?
X Device Tracking, The Invasion
Radvanovsky's RuggedTrax →
Bob Radvanovsky, of Infracritical SCADASEC fame and Critical Infrastructure Protection and Cyber Security Researcher, has completed the RuggedTrax project, and published the findings thereto. Outstanding work Mr. Radvanovsky.
Network Security, It's About The Peoples... →
In a well crafted post at CircleID; in which, security design in the network realm is explored, Burt Kaliski proposes a re-focusing on the rationale of secure system design.
Refugees, The Commandment
Andy Ihnatko's take:
"We are commanded to accept refugees. That’s the entire argument. When people are fleeing a war zone, and escaping from a force that quite simply wishes to eradicate them as if scrubbing out a stain, it doesn’t even matter that the situation is so dire that these people must be referred to as “…surviving members of a family.”
The scale of the crisis is immaterial. People are fleeing the homeland that their families have known for several generations, carrying only what they were able to gather up in the two minutes they had before they fled. We are commanded to accept them. The order comes from the highest possible authority: our humanity.
The US has often refused safe haven to entire populations escaping — let’s be clear and efficient here — “near-certain death.” Have historians ever examined those decisions decades later, with the benefit of perspective and data that were unavailable to people at the time, and declared “Yup. That was totally the right call”?
I bet the answer’s “No.”
This is easy and obvious. I’m certain that you agree with me.
And if you encounter someone who thinks otherwise…help them out. Ask them if they’re religious. If they are, tell them to open up the drawer in the nightstand next to their bed and take out whatever leatherbound book they find in there. They should keep flipping through it until they find the page where it says “You are commanded to help innocent people who are fleeing near-certain death. Not despite the fact that they’re strangers to you, and there’s no benefit to doing so, and doing so might be very hard. You must do it because of those things.”
If they get frustrated after the first few minutes and begin to protest, calm them down and encourage them to keep right on looking because it’s definitely in there somewhere."
Mozilla Privacy Fix, Too Late?
The always erudite Richi Jennings, writing at Computerworld expounds on the apparent longevity (or not) of Mozilla Foundations' Firefox web browser, and the privacy quotient, thereto. Today's Must Read.
Cybersecurity, The Hardness →
Pete Herzog, Co-Founder and Managing Director of ISECOM, writing at Norse Corp's DarkMatters blog, explains why security is hard to get right. Today's Must Read.
Feet of Clay, Bitlocker Backdoor →
Who's In Charge of What →
Patrick Tucker, writing at DefenseOne, details the comedy of errors waiting to be unleashed.
Threat Intelligence, The Primer
Wang Wei talks threat intelligence at The Hacker News, and provides a primer, thereto.