Slashdot Mirror
Security for the Paranoid
Stephenmg writes "In Security for the Paranoid, Mark Burnett talks about his computer security methods after other Security profesionals say he is too Paranoid. 'Paranoia is the key to success in the security world. Is it time to worry when other security professionals consider you too paranoid? I require my kids to use at least 14 character passwords on our home network and I'm considering issuing them smart cards.' I don't see anything wrong with his methods."
Mark Burnett talks about his computer security methods...
"Outwit, outplay, and outlast those pesky script-kiddies."
get with it man, you're not important, nobody wants your porn
The only truely secure computer is one which is switched off and disconnected from the network.
And smashed with a sledgehammer.
And set on fire, to the temperature of 600F, which should be sufficient to destroy the magnetic bits in the hard drive.
And then nuke it from orbit, it's the only way to be sure.
"Can of worms? The can is open... the worms are everywhere."
He just doesn't tell you he rebuilds all computers on his network two days after the patch is released.
wdd
And this guy is set up very secure.
Is he mentally ill? Let's just say he doesn't sound like the type of person I'd want to have a beer with.
In fact, he sounds a lot more like the type of person who has food, water & weapons buried in the woods for the coming Apocalypse.
"I'd rather be a lightning rod than a seismometer." -Ken Kesey
Paranoia's a good starting point for the IT Security beginner, but well-informed abject fear is the mark of a seasoned professional.
Creative Commons music that doesn't suck: emptydrum.com
Does it seem kind of stupid, especially for the 'security paranoid', to announce to the public that you use "at least 14 character passwords"? Seems to me you just set a lower bound and cut out 13^128 possibilities for a cracker :-p
"What's the difference between a random 14 digit password and a random 6 digit password?" 8 digits?
[an error occurred while processing this directive]
Did I win?
Another one bites the dust
I'm not wrong. You haven't thought about it hard enough.
Let's see if this guy's kung fu can survive a few rounds against international superhacker "bitchchecker". Just have him email his IP address to bitchchecker@madskillz.com... (Please allow for a lengthy response time, as bitchchecker is probably busy rebooting his machine for the 75th time today.)
Someday a real rain is gonna come...
kids need 14 character passwords to protect it inside your home?
o rdyounutjob
Their passwords are probably things like:
my_dad_is_an_asshole!
hereismy14characterpassw
You won't be able to get to them in time. Besides, we know the threat is closer than than that. Some of us even know that the apocalypse isn't coming, it's here already.
Look what happens in every zombie movie; you think you have an opportunity to drive even 25 miles and dig up your S&W 1006 and your M4? You're zombie food.
You need your sidearm ON YOU, and your rifle at arm's length. You need 2k rounds for your sidearm and 5k rounds for your rifle on hand ALL the time, along with supplies to crank out another 10k rounds if necessary.
More shit buried in the woods is a great idea, too, but don't leave yourself unarmed.
Skip trust. That boy must have a lot of time on his hands.
"Learning is not compulsory... neither is survival."
--Dr.W.Edwards Deming
The problem is his kids! What about the social engineering risks. Someone could just buy his kids a six pack in exchange for their passwords. The only logical solution is to get rid of his kids. Probably get rid of his wife too. I doubt she can really be trusted to have acess to the system.