It's dangerous out there

If you get a call from someone claiming to be a local court worker claiming you failed to report for jury duty, and you haven’t been asked to serve, red flags should go up in your head immediately, state officials warn.

According to a consumer alert from the office of Tom Gallagher, the state’s chief financial officer, the caller tries to put the victims off-guard by saying an arrest warrant has been issued. When victims say they never received a jury duty notice, the scammer asks for personal information to check their records.

Security Awareness for Ma, Pa and the Corprate Clueless

You know, I am amazed how often these things happen. It’s not that hard folks. Just verify their story. If some one calls you claiming to be from the Court, how about getting their name and information and calling the courthouse back? You can even play it off. Say that you are on the other line, and you need to take a message. Take the message and check it out.

I was interviewed for a security position that I did not get awhile back. I am not certified in computer security, and honestly, I do not see the reason to get certified. It’s just common sense to me. One of the topics that was brought up in the interview was single firewall crust defense vs a layered defense.

A crust defense is when you have a defensive measure at the gateway. Sort of like a sentry that watches all traffic coming and going. A layered defense is when you have that sentry, but also have guards patrolling around inside as well. In computer speak – a crust defense would have a firewall at your connection to the rest of the world. A layered defense would have that firewall, and also firewalls on all of the machines inside of the network, and firewalls on connections to other remote sites internal to your network.

Layering works well when you switch up the firewall vendors as well. For example – have brand X at the gateway, and then brand Y at all internal connections and brand Z on your machines. If any one of the brands develops a problem, you are still safe. Also, if a hacker cuts through your first layers of defense, give him another problem, rather then just more of the same.

I don’t know if I am special or not, but that just makes sense to me. The more layers of defense that the bad guys have to get through to get to your stuff the better. Security really is no more then common sense taken and applied to real world problems.

Sometimes it seems like the people in charge of homeland security spend too much time watching action movies. They defend against specific movie plots instead of against the broad threats of terrorism.

We all do it. Our imaginations run wild with detailed and specific threats. We imagine anthrax spread from crop dusters. Or a contaminated milk supply. Or terrorist scuba divers armed with almanacs. Before
long, we’re envisioning an entire movie plot, without Bruce Willis saving the day. And we’re scared.

Psychologically, this all makes sense. Humans have good imaginations. Box cutters and shoe bombs conjure vivid mental images. “We must protect the Super Bowl” packs more emotional punch than the vague “we should defend ourselves against terrorism.”

The 9/11 terrorists used small pointy things to take over airplanes, so we ban small pointy things from airplanes. Richard Reid tried to hide a bomb in his shoes, so now we all have to take off our shoes. Recently, the Department of Homeland Security said that it might relax airplane security rules. It’s not that there’s a lessened risk of shoes, or that small pointy things are suddenly less dangerous. It’s that those movie plots no longer capture the imagination like they did in the months after 9/11, and everyone is beginning to see how silly (or pointless) they always were.

and

We need to defend against the broad threat of terrorism, not against specific movie plots. Security is most effective when it doesn’t make arbitrary assumptions about the next terrorist act. We need to spend more money on intelligence and investigation: identifying the terrorists themselves, cutting off their funding, and stopping them regardless of what their plans are. We need to spend more money on
emergency response: lessening the impact of a terrorist attack, regardless of what it is. And we need to face the geopolitical consequences of our foreign policy and how it helps or hinders terrorism.

Cryptogram by Bruce Schneier

Too often people get caught up in the minutia of security. The banning of pointy objects on planes, or installing a ‘$100,000 ASIC-based turbo-stateful packet-mulching firewall‘. They miss the secretary sitting two cubes down that just got a call from ‘Ted’ in at the Help desk and gave him her password and login information, not to mention her Social Security number and home address. They miss the bus with a bomb in it because they are worried about protecting airports.

Any time that you declare that you only have to protect this point in space, there will be others that look for other ways in. To be truly secure, we need to step back, and take a broader view.

For example – take my home network. I have a firewall at my gateway. I also have a firewall running on every machine that is on the network. I am not really concerned with virus attacks, but I run a program to sweep my machines free of virus infestations every night. I make backups of my information onto multiple computers.

If I followed the views of some, I would simply put a firewall on my gateway and call it good. Not good enough. I value my data, and my time.

4 thoughts on “It's dangerous out there”

  1. ncdqwti, <a href= http://www.wists.com/Partonlee/3ff8ba1d2a6e0199f8186c3170aba568?offset=0 >insurance sample cancellation letter</a>, ncdqwti, [url=http://www.wists.com/Partonlee/3ff8ba1d2a6e0199f8186c3170aba568?offset=0]insurance sample cancellation letter[/url], ncdqwti, <a href= http://www.wists.com/LinaRoy/34a86fb33ae73795e7fd43da8af17d76?offset=0 >automobile insurance rules</a>, ncdqwti, [url=http://www.wists.com/LinaRoy/34a86fb33ae73795e7fd43da8af17d76?offset=0]automobile insurance rules[/url], ncdqwti, <a href= http://www.wists.com/redgertes/bcf174a87c85acfa2dd0d734d09d186a?offset=0 >Whole Life Insurance Real</a>, ncdqwti, [url=http://www.wists.com/redgertes/bcf174a87c85acfa2dd0d734d09d186a?offset=0]Whole Life Insurance Real[/url], ncdqwti, <a href= http://www.wists.com/harat/51b6ab99381ebf971b6d474b246cf377?offset=0 >debt consolidation non profit</a>, ncdqwti, [url=http://www.wists.com/harat/51b6ab99381ebf971b6d474b246cf377?offset=0]debt consolidation non profit[/url], ncdqwti, <a href= http://www.wists.com/richmondleo/d39950df4643557ffd309c02cb9cea5b?offset=0 >debt cures</a>, ncdqwti, [url=http://www.wists.com/richmondleo/d39950df4643557ffd309c02cb9cea5b?offset=0]debt cures[/url], ncdqwti, <a href= http://www.wists.com/hannarose/f663722129dab020d53dd8d749f06847?offset=0 >I like this online stock trading</a>, ncdqwti, [url=http://www.wists.com/hannarose/f663722129dab020d53dd8d749f06847?offset=0]I like this online stock trading[/url], ncdqwti, <a href= http://www.wists.com/ringshh/d90f21b420af493fa26ce3d0a4743fb8?offset=0 >Very Short Skirts Photos</a>, ncdqwti, [url=http://www.wists.com/ringshh/d90f21b420af493fa26ce3d0a4743fb8?offset=0]Very Short Skirts Photos[/url], ncdqwti, <a href= http://www.wists.com/denverd/cb18c0702a4d78d33c1d1201055dead1?offset=0 >Replica Rolex Watches For Everybody</a>, ncdqwti, [url=http://www.wists.com/denverd/cb18c0702a4d78d33c1d1201055dead1?offset=0]Replica Rolex Watches For Everybody[/url], ncdqwti, <a href= http://www.wists.com/rigovvs/2be50b878bb8d56ef013aaa6dbb9fd09?offset=0 >All kinds of replica designer handbags</a>, ncdqwti, [url=http://www.wists.com/rigovvs/2be50b878bb8d56ef013aaa6dbb9fd09?offset=0]All kinds of replica designer handbags[/url], ncdqwti, <a href= http://www.wists.com/urfatop/8a09fe42d3706b1ce247eaf8d6ba8ed9?offset=0 >All kinds of fake coach purses</a>, ncdqwti, [url=http://www.wists.com/urfatop/8a09fe42d3706b1ce247eaf8d6ba8ed9?offset=0]All kinds of fake coach purses[/url] ncdqwti

  2. <a href= http://www.videocodezone.com/users/kimkardashiansextape/#1 >Kim Kardashian Sex Tape Now</a> [url=http://www.videocodezone.com/users/kimkardashiansextape/#1]Kim Kardashian Sex Tape Now[/url] <a href= http://www.videocodezone.com/users/pamelaandersonsextape1/#1 >Pamela Anderson Sex Tape Real</a> [url=http://www.videocodezone.com/users/pamelaandersonsextape1/#1]Pamela Anderson Sex Tape Real[/url] <a href= http://www.videocodezone.com/users/keeleyhazellsextape/#1 >Keeley Hazell Sex Tape Pictures</a> [url=http://www.videocodezone.com/users/keeleyhazellsextape/#1]Keeley Hazell Sex Tape Pictures[/url] <a href= http://www.videocodezone.com/users/grannysex/#1 >Discount granny sex</a> [url=http://www.videocodezone.com/users/grannysex/#1]Discount granny sex[/url] <a href= http://www.videocodezone.com/users/lindseylohansextape/#1 >Lindsey Lohan Sex Tape For Everybody</a> [url=http://www.videocodezone.com/users/lindseylohansextape/#1]Lindsey Lohan Sex Tape For Everybody[/url] <a href= http://www.videocodezone.com/users/freekimkardashiansex/#1 >free kim kardashian sex tape</a> [url=http://www.videocodezone.com/users/freekimkardashiansex/#1]free kim kardashian sex tape[/url] <a href= http://www.videocodezone.com/users/knockoffcoachpurses/#1 >Knock Off Coach Purses Information</a> [url=http://www.videocodezone.com/users/knockoffcoachpurses/#1]Knock Off Coach Purses Information[/url] <a href= http://www.videocodezone.com/users/unsecuredpersonalloans/#1 >Unsecured Personal Loans For You</a> [url=http://www.videocodezone.com/users/unsecuredpersonalloans/#1]Unsecured Personal Loans For You[/url] <a href= http://www.videocodezone.com/users/dirtcheapairlineticket/#1 >Greatest dirt cheap airline tickets</a> [url=http://www.videocodezone.com/users/dirtcheapairlineticket/#1]Greatest dirt cheap airline tickets[/url] <a href= http://www.videocodezone.com/users/badcreditstudentloans/#1 >Bad Credit Student Loans Yeah</a> [url=http://www.videocodezone.com/users/badcreditstudentloans/#1]Bad Credit Student Loans Yeah[/url]

  3. <a href= http://www.wists.com/graciasa/bba99e835015405974a271cf27521c96?offset=0#1 >Brilliant high risk personal loans</a> [url=http://www.wists.com/graciasa/bba99e835015405974a271cf27521c96?offset=0#1]Brilliant high risk personal loans[/url] <a href= http://www.wists.com/PatriciaLop/7d5b82762c6f01530990eb92e7ec3b3e?offset=0#1 >No Credit Check Student Loans All Here</a> [url=http://www.wists.com/PatriciaLop/7d5b82762c6f01530990eb92e7ec3b3e?offset=0#1]No Credit Check Student Loans All Here[/url] <a href= http://www.wists.com/hacvin/94f1201f6ba43a9c5c5161689fe06ab5?offset=0#1 >need 5000 loan overnight</a> [url=http://www.wists.com/hacvin/94f1201f6ba43a9c5c5161689fe06ab5?offset=0#1]need 5000 loan overnight[/url] <a href= http://www.wists.com/ragnarson/068288d9b4acc9cf266b309e376f572d?offset=0#1 >Discount guaranteed online personal loans</a> [url=http://www.wists.com/ragnarson/068288d9b4acc9cf266b309e376f572d?offset=0#1]Discount guaranteed online personal loans[/url] <a href= http://www.wists.com/uciwon/dfde31c6f1922b3df5fb40354d5b8c03?offset=0#1 >All kinds of personal loan for poor credit</a> [url=http://www.wists.com/uciwon/dfde31c6f1922b3df5fb40354d5b8c03?offset=0#1]All kinds of personal loan for poor credit[/url] <a href= http://www.wists.com/percussions/e09a17d939b674e0f16f6b3b486e0f71?offset=0#1 >No Credit Check Car Loans – Best Decisions</a> [url=http://www.wists.com/percussions/e09a17d939b674e0f16f6b3b486e0f71?offset=0#1]No Credit Check Car Loans – Best Decisions[/url] <a href= http://www.wists.com/jakeswang/7b4416db1e0ed82439b5234bafa3c7fb?offset=0#1 >mortgage rates predictions</a> [url=http://www.wists.com/jakeswang/7b4416db1e0ed82439b5234bafa3c7fb?offset=0#1]mortgage rates predictions[/url] <a href= http://www.wists.com/reallit/37d7f9fa7b73db7fc4d95702c86da3ec?offset=0#1 >Super Cheap Airplane Tickets Pictures</a> [url=http://www.wists.com/reallit/37d7f9fa7b73db7fc4d95702c86da3ec?offset=0#1]Super Cheap Airplane Tickets Pictures[/url] <a href= http://www.wists.com/military/6f8a7ac9889a031b07890c5d3aef2730?offset=0#1 >Military Loans Great</a> [url=http://www.wists.com/military/6f8a7ac9889a031b07890c5d3aef2730?offset=0#1]Military Loans Great[/url] <a href= http://www.wists.com/jerkinst/84086de3cf65ef173e3657eac4eef9f4?offset=0#1 >1000 Loan Payday In The World</a> [url=http://www.wists.com/jerkinst/84086de3cf65ef173e3657eac4eef9f4?offset=0#1]1000 Loan Payday In The World[/url]

  4. An excellent post. All the security in the world is worthless if you just hold the door open to the bad guys.

    I’d tell the person on the phone to come arrest me. When do the police call you and tell you that there is a warrant out for your arrest? haha.

    Great advice, but are people listening?

Comments are closed.