How do Find My, car keys and credit cards work when your iPhone is off? 📴 Turns out that Bluetooth, NFC and Ultra-Wideband can run standalone while iOS is shut down. My talk about this finally went online 🎉
"Password expiration requirements do more harm than good, because these requirements make users select predictable passwords"
Thank you Microsoft. NIST agrees. Everyone who attacks password auth agrees. Can we get compliance to update their requirements.
https://t.co/8nZszqKUBC
Mit der App "SafeNow" wollen @bpol_b und @bmi_bund den Sicherheitsbahnhof Südkreuz noch sicherer machen.
@fluepke und ich haben uns die App angeschaut.
Eine Geschichte über Marketing-Lügen, die Startup-Yuppies reicher und Dein Smartphone unsicherer machen.
https://t.co/g3DpSYwTLH
Security ist kein Selbstzweck. Wenn eine Funktion gebraucht wird, ist das nicht verhandelbar - Security schon. Schwierig? Da fängt unser Job an, liebe Security-Community! Der "hippokratische Eid" für Security-Fachleute sollte lauten "wir verhindern nicht, sondern machen möglich."
@ElleArmageddon for me it's:
“I will do my best to patch the things I can patch, mitigate the things I can mitigate, and transfer the risk of that which I can neither patch nor mitigate to a personally liable officer of the company whether they like it or not.”
If you ever wondered why there were so many spam bot animal/nature/science picture Twitter accounts many that even show fake/photoshopped pictures & videos, many thrive on getting massive followers then selling the account to others for even more spam crap.
Use of asbestos is controlled by law, because of the harm it can do to human beings if not used *extremely* cautiously. The damage doesn’t show up until long after exposure.
It’s exactly the same for personal data.
We have laws because business doesn’t make ethical choices
October is "Cybersecurity Awareness Month". We need to teach awareness that cybersecurity is a bad thing. Absolute cybersecurity means absolutely useless. Good networks means taking risks.