Group items tagged

"[P]eople still choose comfort over security.  If you don't enforce a password policy, don't expect your users to do it for you." A fairly large instance of the Pony Botnet Controller produced so much data, we thought it would be interesting to look into some statistics regarding this particular attack. ~1,580,000 website login credentials stolen ~320,000 email account credentials stolen  ~41,000 FTP account credentials stolen ~3,000 Remote Desktop credentials stolen ~3,000 Secure Shell account credentials stolen

As I analysed various breaches I kept finding user accounts that were also disclosed in other attacks - people were having their accounts pwned over and over again. So I built this: HaveIBeenPwned.com

"A chief of police has two important and sometimes conflicting responsibilities - his or her own officers and members of the community. He or she must, on one hand, be the leader of the police  and, at the same time, the chief of and for the community. It is in the use of deadly force that these responsibilities come into conflict. If the chief, in a questionable shooting, decides in favor of the officer, the chief must be able to demonstrate to the community and convince them that the shooting was both lawful, within the stated policy of the department, morally defensible, and consistent with training."--David Couper

Difficulty measuring the effects of disaster preparedness has prevented a proper accounting of its benefits, says a paper published by the Institute of Medicine. "In principle, we could evaluate the effectiveness of an investment in preparedness with appropriate measures of outcomes such as response times, property saved, etc.," the paper (.pdf) says. But because emergencies are relatively rare and so different from each other, researchers rely on case studies or other qualitative methods, instead of empirical studies. The authors of the paper, dated Jan. 7, are two emergency medicine professors--Jesse Pines of George Washington University and Seth Seabury of the University of Southern California--and William Pilkington, the public health director for Cabarrus County, N.C.

Earlier this week, the New York City Police Department asked for people to share photos of themselves posing with police officers, tagging these images on Twitter with #myNYPD. Within a few hours, a stream of images depicting police brutality dominated the hashtag timeline, and the @NYPDnews account had no immediate response. While most of the morning-after media analysis focused on the online protest and questioning the initiative itself, the fate of this particular hashtag and others like it is not sealed. The most constructive reflection at present does not dwell on past mistakes, but rather accepts the challenge of an undecided future.

Evaluation and feedback forms now include promoting a healthy organizational climate as a performance factor. The Air Force defines "organizational climate" as the way airmen in a unit perceive and characterize their environment. In other words, you'll be graded on how well you do at setting the tone around you. Promoting a healthy organizational climate is listed as a leadership skill under the performance factors section of the new officer performance reports. It is listed as a primary duty on the enlisted performance reports. "We'd like every airmen to go look at the rewrite of the Air Force Instruction so you know how you're expected to perform and be rated," Grosso said. "If you have any questions, talk to your military personnel section."

Do you always create unique passwords such that you never use the same one twice? Ever? Do your passwords always use different character types such as uppercase and lowercase letters, numbers and punctuation? Are they "strong"? If you can't answer "yes" to both these questions, you've got yourself a problem. But the thing is, there is simply no way you can remember all your unique, strong passwords and the sooner you recognise this, the sooner you can embrace a more secure alternative.