PhoneBoy Speaks

Users know they should do something to protect corporate data, but they don't actually do anything to do so. Who's fault is that? Ours, as infosec professionals. We don't make it easy for people to do the right thing.

Links:

Top 4 Ways Employees Compromise their Corporate Data via Cloud Services —Check Point Blog “Recent research by Gartner showed that “Through 2020, 95% of cloud security breaches will be the customer’s fault.””

SecurityBrief NZ - Employees worry about security but don't do anything about it, survey finds

How is it I can auto-deploy and auto-update applications in the cloud and yet desktop software still requires someone with admin privileges to agree to update the software? This is 2016, folks!

Links:

It's been 100 episodes since my last "state of the podcast" type podcast, so here it is.

Some work-related anniversaries recently happened. Also, social media: it's important for your professional life.

Links:

WhatsApp claims end-to-end encryption has been implemented in their app. So what? The metadata Is still there and I have no doubt WhatsApp (a Facebook joint) will give it up on demand.

Links:

WhatsApp Encryption Explained --- "Everything is not what it seems"

WhatsApp is now most widely used end-to-end crypto tool on the planet —Ars Technica “(credit: samazgor) WhatsApp has enabled end-to-end encryption across all versions of its messaging and voice calling software, according to a Tuesday announcement on

Databases that map IP addresses to physical locations exist, but they were meant for providing a general idea where the IP is, not a specific location. Sadly some people have used these databases to find people at exact locations, with inaccurate results and a bit of annoyance for the people who happen to live in the chosen location.

Links:

Internet mapping turned a remote farm into a digital hell | Fusion

It saddens me that even so-called security vendors lack a sense of urgency when it comes to fixing vulnerabilities in their products.

Links:

More than 135 million ARRIS cable modems vulnerable to remote attacks —Security Affairs “Attackers can exploit the flaws in the ARRIS SURFboard cable modems to remotely knock out the device, more than 135 million device open to attacks.”