Infosecurity.US

Information Security & Occasional Forays Into Adjacent Realms

  • Web Log

Why We Strongly Advocate Ad Blocking: The Steg Affair

January 25, 2019 by Marc Handelman in Ad Infinitum, Advertising, Information Security, Security Hygiene, Ad Blocking

via Dan Goodin - Security Editor at the beloved Ars Technica, comes further proof of why we proselytize Ad Blocking on enterprise desktop browser deployments, as well as network devices in (and on) all systems.

Furthermore, we strongly advise the implementation of individual element blocking - by user - and, train them on use (within reason) of that toolkit (most ad blocking browser extensions possess user-implemented element blocking).

Advertisement Blocking is absolutely essential (at this time, and is as crucial as anti-malware - becuase, after all, advertising vectored through both browser and application display, as well as email should always be considered pernicious) in the effort to implement, deploy and maintain information security hygiene in the enterprise - and on personal computational devices, as well. Of course, we also advise the utility of centralized ad-filtering, whether by device or software packages, in the datacenter and at home.

Now get back to work.

January 25, 2019 /Marc Handelman
Ad Infinitum, Advertising, Information Security, Security Hygiene, Ad Blocking

Docker Hub, The Backdoor

July 01, 2018 by Marc Handelman in Security Hygiene, Information Security, Container Security, Containerization

Dan Goodin, writing at Ars Technica, reported. last week of the backdooring of the Docker Hub by compromised Docker images placed on the site. Apparently, all is well now, as the backdoored image has been removed (after five solid months of public complaints)... The takeaway? Timely Security Hygiene Is A Crucial Attribute For Success Docker Hub Admins!

"Neither the Docker Hub account nor the malicious images it submitted were taken down. Over the coming months, the account went on to submit 14 more malicious images. The submissions were publicly called out two more times, once in January by security firm Sysdig and again in May by security company Fortinet. Eight days after last month's report, Docker Hub finally removed the images." - via Dan Goodin, writing at everyone's beloved Ars Technica

July 01, 2018 /Marc Handelman
Security Hygiene, Information Security, Container Security, Containerization