5

I have done some searching, and cannot seem to find this. Does anyone know of a "security fail forum" that lists embarrassing and / or damaging results from lack of security practices? I would like it to serve to educate everyone on how important computer security really is, kind of like the drunk driving horrors video is meant to discourage drunk driving. It would be nice if it also pointed out what could have been done differently, or the lesson learned. Here are a couple examples:

Example 1:

Security Fail:

Someone let their former friend use their computer, but they did not log out of their bank account before hand. This "friend" transferred all the funds of the owners bank account to their own bank account! The owner lost $10,000, quite a costly lesson!

Lesson(s) Learned / Preventative Measures:

  • Do not let your friends use your computer under your user account
  • If you do let your friends use your computer (especially under your account), make sure you watch what they are doing
  • Log out of websites when you are done on them
  • Lock your computer or log off when you leave it

Following any of these practices would have prevented the incident.

Example 2:

Security Fail:

My website is being repeatedly Distributed Denial of Serviced (DDoS)! What can I do to prevent it?

Lesson(s) Learned / Preventative Measures:

NONE YET - Awaiting good suggestions!

Improve this question
13
  • 2
    If you let your friend use your computer and they steal $10k from you, I'd argue that that's an issue with your choice of friend, not what you're letting them do.
    – cpast
    Feb 3, 2015 at 15:56
  • 3
    So, an IT Security version of The Daily WTF? If there isn't one, we should make one.
    – S.L. Barth
    Feb 3, 2015 at 18:28
  • 2
    There is a security fails Twitter account : twitter.com/secfails
    – user42178
    Feb 4, 2015 at 8:43
  • 1
    @AndréDaniel Nice find! One of the tweets links to this: secmeme.com which also has some nice posts.
    – S.L. Barth
    Feb 4, 2015 at 11:02
  • 2
    Also there is Plaintext Offenders for real world examples on how not to store passwords.
    – user42178
    Feb 4, 2015 at 11:03

1 Answer 1

Reset to default
2

The Department of Homeland Security offers Open-Source Infrastructure Reports though daily emails, and in tandem with this you may sign up for US-DHS-CERT updates on vulnerabilities. I don't know of a singular source with this information.

http://www.dhs.gov/dhs-daily-open-source-infrastructure-report

https://www.us-cert.gov/ncas/current-activity

For a comprehensive list, such as the one you are looking for, cross-referencing will more than likely be necessary.

For the specific format of information you are looking for, the IRC site may have this type of information, though you would be essentially entering the 'wolves den.'

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.