CAPTCHA's That Kill - Guaranteed Hacker-Proof
Wednesday, November 19th 2008 @ 8:19 AM (not yet rated)
For the funny stuff, if you already know about CAPTHCA's, skip to the bottom of this article.
If you've never heard of CAPTCHA's, you've probably seen them. They are the images that you encounter when submitting web-based forms that contain some characters or numbers you have to enter into one of the fields in order to complete the process. The reasoning is that many spammers now use programs that can automatically fill out web forms to add their spam to blogs or register new webmail accounts at places like Yahoo.
The term CAPTCHA is an acronym for a test developed at Carnegie Mellon University for Yahoo (click HERE for a lot more info). The acronym is the short form for - Completely Automated Turing Test to Tell Computers and Humans Apart (actually CAPTTTCHA).
Many CAPTCHA schemes have been broken by increasingly complex computer algorithms used by hackers. But the biggest weakness is that hackers can employ low-cost labor on the Internet to actually use human intelligence to break them in real-time.
So, the CAPTCHA concept as it exists now, is not likely to be the best solution for the long term. You will eventually end up with images like the one in the link below...
This cartoon (click HERE) is a great hyperbole that takes CAPTCHA's to the extreme.
| Share | My live security awareness webinars are a quick and affordable way to provide your entire staff with professional quality security awareness training and education - whether it's general training or for specific teams or industries. I offer group rates and can tailor content to your specific needs. Please call or email me at the coordinates below, or CLICK HERE to see my training webinar catalog.
Scott Wright
The Streetwise Security Coach
Join the Streetwise Security Zone at:
http://www.streetwise-security-zone.com/join.html
Phone: 1-613-693-0997
Email: scott@streetwise-security-zone.com
Twitter ID: http://www.twitter.com/streetsec
To receive weekly security tips and other notices about helpful content available on this site, please make sure you are on my list by clicking HERE, and entering your name and email address.
 |
The perfect gift mug for Security Geeks - let them know you wouldn't want to be them
Friday, November 14th 2008 @ 6:59 AM (not yet rated)
It's OK to be human, or even cynical about security for a moment, if you take advantage of the opportunity to engage people about the information they handle in their jobs, and how important it is to the organization.
(If you can't see the image of the mug below, follow the link in the captions below to see it.)
"Stop Shooting! I'm Just the SECURITY Guy!"
Office Mug
Just in time for the office Christmas party season, now you can show your Security Geek that you get their pain. Or, you can just buy one for yourself to get some sympathy and start the conversation about the Governance by Graffiti movement.
There's no point in denying that security is a dirty word in some organizations. But sometimes you just need to break the tension and get people to talk about it. What better conversation starter than a mug that clearly separates the person from the role?
But when people take the bait, the real discussion needs to turn to how the information that people handle in their job impacts the organization, and what they can do, in their small way, to help take action now.
You can then use the opportunity to direct people to the Streetwise Security Zone as a place where they can find out about Governance by Graffiti... and how you can leverage this informal community to learn more about security and complement your formal security programs.
Zazzle.com is a great place to customize all kinds of merchandise with your own messages, and even order "one-off" copies of products designe by yourself or others. Whether for security or other purposes, you can come up with great gifts for office Christmas parties. Click the Zazzle.com link above to see how easily you can find or create what you're looking for.
| Share | My live security awareness webinars are a quick and affordable way to provide your entire staff with professional quality security awareness training and education - whether it's general training or for specific teams or industries. I offer group rates and can tailor content to your specific needs. Please call or email me at the coordinates below, or CLICK HERE to see my training webinar catalog.
Scott Wright
The Streetwise Security Coach
Join the Streetwise Security Zone at:
http://www.streetwise-security-zone.com/join.html
Phone: 1-613-693-0997
Email: scott@streetwise-security-zone.com
Twitter ID: http://www.twitter.com/streetsec
To receive weekly security tips and other notices about helpful content available on this site, please make sure you are on my list by clicking HERE, and entering your name and email address.
|
