Posts by [e-mail]

Physical locks are less hackable than digital locks, right? Maybe not: Boffins break in with a microphone

Re: So we need to upgrade the physical locks....

Agreed. Avocet ABS is the minimum standard for domestic security, IMHO.

Re: LockPickingLawyer

You beat me to it. LPL and BosnianBill have proven that time and time again a poorly made physical lock (e.g. of the Master Lock brand) can be defeated with minimal tools and skill.

Greatest threat facing IT? Not the latest tech giant cockwomblery – it's just tired engineers

The closest I've come to this situation was when I was contracting for a red-coloured mobile phone provider migrating some data from one SAN to another. I was using robocopy to keep two system in sync. Normally I use the /mirror parameter to copy anything from the source to the destination, but this time I also used the /purge parameter which also REMOVES anything thats on the destination thats not on the source. I'd failed to check and deleted 500GB of unrelated data on the destination. Data that was required, and fairly urgently. Opps! I learnt a few useful lessons that day. 1) own up. 2) check thoroughly and use the /l parameter to simulate before commiting. 3) $25 spent on GetDataBackNTFS was the best $25 ever spent!

I got all the data back and still keep that data recovery tool license handy, 15 year later, just in case....

El Reg assesses crypto of UK banks: Who gets to wear the dunce cap?

Good article. Maybe this will help them?

I too have had concerns over the security of banking websites. I'd tested Santander with SSLLabs a while back and it scored badly. It was near impossible to get anyone at the bank to listen to me, although it does look like they are listening now as the score has improved. Conversely, I reported similar SSL vulnerabilities to my investment platform (AJ Bell) and had a phone call back almost immediately from their Security Officer thanking me for my concerns and assuring me they'd address them. They fixed the issues within a week. Kudos to them.

So, it can be done, and HSTS is really simple to implement too.

El Reg, maybe forward them all this article from the reknown Troy Hunt?

https://www.troyhunt.com/the-6-step-happy-path-to-https/

Squirrel sinks teeth into SAN cabling, drives Netadmin nuts

I can trump your squirrels with monkeys.

We have a number of overseas facilities in countries where monkeys roam freely. We've had issues with their intrusion into the datacentre and offices, so now employ a big man with an even bigger Monkey to act as a deterrent to them. Somewhere we have a photos - I'll try and dig them out.

Never mind the security guard with the GSD, it's the monkey you need to be scared of!