Copyright © What The Hell? Security There are 3 kinds of security in business: Good security, acceptable security and bad security. Good security is the kind that works for the business and for the people who work in it. It aligns with universally known objectives, and is communicated in a way that motivates people to [...]
Filed under: fraud, security, security sense, security soapbox | Leave a Comment »
Copyright © What The Hell? Security I’m on the horns of a dilemma. I’ve come up with a few phishing use cases not yet witnessed in the wild. Should I exercise full disclosure or responsible disclosure? That’s a completely nonsensical question of course. Who the hell would I report it to? Onguard Online? Phishtank? APWG? [...]
Filed under: fraud, phishing, security | Leave a Comment »
Copyright © 2009 What The Hell? Security If you believe that Bit.ly is going to solve their shortened URL problem the way they intend to, have I got a story for you. [Sidebar: Be aware that it's completely safe to click on the links in the previous paragraph. If you don't believe me, select View [...]
Filed under: fraud, hypertext, phishing, security, security soapbox | Leave a Comment »
Copyright © 2009 What The Hell? Security John Pescatore makes a point about warning vs. blocking bad links. But here’s the thing about links: We’re thinking about them all wrong. Now, of course there are bad links. They end up on blacklists. Let’s pretend they’re more than marginally useful. (If you have issue with that [...]
Filed under: fraud, hypertext, phishing, security | Leave a Comment »
