DNS-BH – Malware Domain Blocklist

Off Topic but too funny not to pass on:

http://devopsreactions.tumblr.com/

FOR IMMEDIATE RELEASE (April 1 2013)

New program eliminates all malware and viruses!

We are proud to announce a new program, which, once installed, will eliminate all viruses and malware on your computer as well as “sniff” out any local machines and remote install itself to ensure those machines are not infected as well.

Bonus! By installing it on a bluetooth enabled device, and riding the subways and busses, you will be doing your fellow commuters a favor by ensuring their smartphones and laptops are cleaned up and never infected again as well.

This new techology uses “scent-ware” technology and works with Google Nose to “sniff” out new malware and viruses.  Click here to download and beta-test this new exciting application!

we are testing a twitter page…

https://twitter.com/malwaredomains

Since the majority of viewers here also are members of linkedin,  if you haven’t already heard, linked had a huge password compromise..

http://blog.linkedin.com/2012/06/06/linkedin-member-passwords-compromised/

We want to provide you with an update on this morning’s reports of stolen passwords. We can confirm that some of the passwords that were compromised correspond to LinkedIn accounts. We are continuing to investigate this situation and here is what we are pursuing as far as next steps for the compromised accounts:

 

Some reports say over six million passwords were exposed… http://technorati.com/social-media/article/six-million-linkedin-passwords-leaked/

We never share passwords across different sites, right

At my “real job”,  I’m constantly getting push back from users,  ops people (netadmins sysadmins, etc) and developers about security.  For example:

• “This isn’t the pentagon”
• “We can’t do our work”
• “But it’s encrypted and the key is only by two different people”
• “You say it’s an security issue but we haven’t been hacked so far so how much of a risk can it be”

At first glance, of these statements seem valid and reasonable (especially when it’s presented to upper management).

When management comes to you with these statements,  these needs to be simple, concise answers (maybe two, for both technical and non-technical users)

How many of you have received these arguments from users?
What other arguments have you received?
How have you responded?   (especially if you “won” the argument and convinced the user and manager)

We’ll collect the responses and summarize. Email us at 12malware8domains789@32gmail33.com33 (remove numbers)