Security quotes of the week

There comes a time after coping with security holes nonstop for 5 days straight, when it is best to log off the internet entirely, stop thinking, drink lots of rum, and go surfing.

Boom, thanks for sending me your PayPal username and password, pal. I'll send you a thank you card with a photo of the stuff I bought with your money.

Naturally, I only do this trick once per device and bounce the user right back to the referring page where they will shrug and try again.

(Using this method, I took over Trump's Twitter account and started sending out all sorts of weird shit. As yet no one has noticed.)

"Throw it away and buy a new one" is ridiculous security advice, but it's what US-CERT recommends. It is also unworkable.

[...]

2018 will be the year of microprocessor vulnerabilities, and it's going to be a wild ride.