Skip to main content

My Computer Security Failures

I'm a security-concious guy, but I have screwed up before.  Here are my security failures over time that I know about:


1994: I downloaded and executed a program from the Internet.  The program spun through the Windows 3.11-based system, overwriting all files.  This resulted in significant data loss.

Root cause: User trusted untrustworthy software.  User failed to back up system.


2001: Fell victim to an SSH exploit on my Linux-based router machine.  The machine was compromised by a remote attacker and used to send spam.  The machine needed to be wiped and reloaded.

Root cause: Zero-day exploit vulnerability, and/or failure to keep on top of security patches.


2006: I gave administrative rights to my brother's au pair's Windows XP-based PC, under pressure from the au-pair who wanted to install software.  The machine was quickly overwhelmed by malware despite anti-virus practices.  The machine was kept in service after significant cleanup.

Root cause: The platform assumed users would need powerful privileges; administrator inappropriately complied.


2008: My account at a popular Internet Service, Twitter, was compromised and misused.

Root cause: I followed poor password management practices: I re-used an identical username/password pair with multiple service providers for accounts "I didn't care about".


2008: Unprivileged Mac OS X user account was compromised remotely over SSH via brute force, due to simple username and matching simple password.

Root cause: Administrator enabled remote SSH access but failed to restrict ssh access to specific accounts.


2014: Wireless access point unsecured, resulting in open network access over-the-air.

Root cause: Administrator created a second wireless SSID without properly securing it.

Popular posts from this blog

Fixing a SodaStream Jet, part 1: Disassembly Guide

I've had my SodaStream Jet for years, and once in a while something has gone wrong. Disassembly is the first step to repair.  Start with this article to see how to disassemble the SodaStream, and then once you have that down, scroll through my other articles to see how I repaired specfic SodaStream problems. SodaStream Jet Disassembly Guide Tools Required Flat head screwdriver Phillips head screwdriver 1. Remove the Carbonator.  Duh. 2. Remove the black panel lever The front big black tilt lever needs to be removed first. Removing this panel is tricky, but it isn't impossible. Looking up at the bottom of the black panel, there are two tabs, one on the left and one on the right. These tabs fully secure the panel in place. The trick is to use a flat-head screwdriver under the plastic to gently lever the tabs out of the way.  Note in the pictures how I approach these tabs with my screwdriver.  I usually release the left side first, and then I release ...

Macintosh: Upgrading an eMac

It's been a long time since I wrote this article, but the fact remains: The good old eMac can still be useful if you take the simple steps to keep it as good as it can be.  All can run Tiger, and most can run Leopard - great operating systems for their day with a bit of useful life.  This article describes the procedure I used to upgrade my old eMac, including: Replacing the internal hard disk with a large capacity drive. Increasing the memory for performance Upgrading the operating system Here I'm upgrading a 700 MHz eMac, but the procedure and tasks for upgrading other eMac models should be almost identical. Upgrading versus Replacing My sister's eMac is of the 700 mhz variety, with 256 MB of memory. The machine seemed to be getting "slower", and the original 40 GB disk was becoming jammed packed with photos and iTunes, and within a few months she'd be out of disk space. There were two options to address the problems: upgrade the eMac, or go o...

Connecting your MIDI keyboard to your Mac

MIDI and the Mac.  It's easy, fun, and shockingly inexpensive! I enjoy fooling around with musical instruments, and so when Garageband originally came out several years ago, I was very excited to start using it with my cheap little Casio keyboard. Initially it seemed expensive and complicated to get the right parts together to connect the Mac to my keyboard via MIDI. I didn't want to spend a ton of money in professional-class electronics. I wanted to fool around. Happily, I discovered that it's inexpensive and easy.  If you know where to look, a Mac-compliant MIDI adapter can be purchased for under $10! That's right, for less than $10 I connected my Mac to my MIDI keyboard and by MIDI drum kit. I bought an MIDI-to-USB interface, in particular, one like this really inexpensive USB MIDI Cable available through Amazon . The adapter is a simple device that has a MIDI "in"/"out" connectors on one end, and a USB connector on the other.  The adapt...

Transitioning to Comcast Now!

I've transitioned to Comcast NOW, a lower speed, lower cost alternative.  The kids have grown up and moved out.  I'm spending much more of my time traveling.  I don't need the high speeds at home like I used to. This transition promises to save me $240 dollars a year versus my old "discounted" plan. Xfinity to Comcast Now transitioning process I went to the Xfinity store and told them I was cancelling two weeks out.  This isn't weird - people move all the time, so they do have a process for cancelling at a future ("move-out") date. Later the same day, I was able to go to the Comcast website and order the NOW modem for the new service. Note that Comcast didn't let me do this until I had a future cancel order in place.  Three days later, the modem arrived via FedEx. The cancel date came and went - Xfinity seems to have a grace period, so the old modem wasn't unceremoniously yanked out of service at midnight.  This made the transition smooth.  ...

Old Apple gear that keeps on ticking

I've been dealing with Apple computer gear for a long time, as have my friends and family. Here is a list of the old gear that me and/or my friends have in active service.   Note that this gear is in real service, and isn't treated as museum pieces or as part of a retro-computing hobby. 2008: Apple Airport Express, draft-N, first generation 2009: Apple MacBook, late 2009 (utility use only) 2010: Apple iPod nano, 6th generation 2013: Apple Airport Extreme AC 2015: Apple TV HD (4th generation) The big winner here is the Airport Express, which is modern enough to do its job, and it just keeps on going.  The device that my friend runs has been in operation for more than 125000 hours.  It received its most recent firmware update on 28 August 2018, 10+ years after its initial release. In terms of security: it has no open, unpatched CVE vulnerability reports.  Many generations of other routers have come and go while this one keeps going.

Picking a Cable Modem for Xfinity

There are a lot of cable modems on the market, and many are compatible with Xfinity service. However, that doesn't mean that every modem is perfect. My basic requirements are: Currently certified by my ISP.  Buying a cable modem that isn't currently certified is simply unlikely to work. Capable of supporting needed service speeds.  Buying a cable modem which cannot deliver the service needed is going to be an immediate bottlebeck.  Buying a cable modem which is far more capable that the service speed is likely a waste of money, No built-in WiFi capability or Telephone line capability.  A personally-owned WiFi router is likely a better choice than an all-in-one unit that will need to be positioned exactly where the cable is within the house.  Don't over-buy.  Cable modems do not last forever.  Manufacturers abandon support, and cable modems aren't infinitely durable due to things like lightning strikes and being powered on for years at a time. So what ...

Other Posts

Show more