Re: Security in 2017 (was "OK, the list *really* needs to be fixed")

2017-01-03 Thread J. Landman Gay
The limitation goes back to the time when routers cost upwards of $200 and hardly anyone had one. Things are getting better now for some manufacturers but still not all. I'm more concerned these days about malware that attacks routers and the inability to find out if your current one is

Re: Security in 2017 (was "OK, the list *really* needs to be fixed")

2017-01-03 Thread Bob Sneidar
You may want to spend more than $35 on a router. ;-) Bob S On Jan 3, 2017, at 14:54 , J. Landman Gay > wrote: On 1/3/17 3:42 PM, Richard Gaskin wrote: My favorite example is wifi routers. They ship with a default password and login

Re: Security in 2017 (was "OK, the list *really* needs to be fixed")

2017-01-03 Thread J. Landman Gay
On 1/3/17 3:42 PM, Richard Gaskin wrote: My favorite example is wifi routers. They ship with a default password and login published in the manual, and more than 75% are never changed. And almost all the routers I've had over the years won't even *let* you change the login name. It's always

Re: Security in 2017 (was "OK, the list *really* needs to be fixed")

2017-01-03 Thread Richard Gaskin
Bob Sneidar wrote: > And redundant backups are just one more vector to your data. Indeed it is. The old adage "physical access = root" still applies. I have a friend I met through my local Linux user group who does security audits. One of the most common sets of problems he finds isn't

Re: Security in 2017 (was "OK, the list *really* needs to be fixed")

2017-01-03 Thread Rick Harrison
Hi Bob, That is both a great and terrible story! One really can’t make this type of story up either because it’s too bizarre. Sorry to hear that it was a true one for you! Thanks for sharing... Rick > On Jan 3, 2017, at 4:16 PM, Bob Sneidar wrote: > > And

Re: Security in 2017 (was "OK, the list *really* needs to be fixed")

2017-01-03 Thread Richard Gaskin
Rick Harrison wrote: > Hi Richard, > > Remember that if just one bit/blob on your encrypted hard > drive becomes unreadable, then you could lose > everything on that drive. That makes redundant > backups over time even more important! That was why I've been putting it off for so long. But so

Re: Security in 2017 (was "OK, the list *really* needs to be fixed")

2017-01-03 Thread Bob Sneidar
And redundant backups are just one more vector to your data. Really, security has to be balanced with usability. Absolute security is to never write, type, speak or otherwise store any information you want to protect, or which might give clues to any information you want to protect. This is of

Re: Security in 2017 (was "OK, the list *really* needs to be fixed")

2017-01-03 Thread Rick Harrison
Hi Richard, Remember that if just one bit/blob on your encrypted hard drive becomes unreadable, then you could lose everything on that drive. That makes redundant backups over time even more important! Have a great secure NewYear! Rick > > This year I want to take this further. I just turned

Security in 2017 (was "OK, the list *really* needs to be fixed")

2017-01-03 Thread Richard Gaskin
Bob Sneidar wrote: > DON'T CLICK THE LINK! Amen, brother. A wise default. Click nothing in an email unless you're certain it is what it claims to be. This article was eye-opening for me: The human attack surface, counting it all up Humans have become the primary attack surface for