Notices by John Opdenakker (j_opdenakker@infosec.exchange)

Repeat after me: enforcing password complexity criteria is stupid.

“Do you want to defend against an auditor or against an attacker?”

The data of your customers that you don't collect and store cannot be stolen from your systems.

Security by removal.

Remove all

- user accounts you no longer use.
- software you no longer use on your pc.
- redundant apps on your mobile devices.
- unnecessary third party apps that have access to other apps.
- files or documents that contain sensitive information.

#Infosec

HTTPS & SSL doesn't mean "trust this." It means "this is private." You may be having a private conversation with Satan.

- Scott Hanselman

Don’t forget to increment the year in your password!