So as announced earlier LulzSecurity is quitting their movement.
I’m sure we’ll see some copycat groups pop up in the next few years, but one thing will resonate with everyone from the LulzSec hacks: We should all pay more attention to security.
Now I realize that as companies get larger and larger, they let information security fall by the wayside. Everything from Security Awareness training to systems hardening and review *should* be implemented for every company who services any users.
Instead, we get corporations with unpatched Windows XP machines sitting unfirewalled on the internet. Secretaries that will gladly tell you information you shouldn’t know, with just a few kind words. Systems that are 10 years old that have had no patches for at least that long because everyone forgot they existed.
I won’t lie. I haven’t been dedicated to the security game in a long time. I make a concerted effort to prevent remote exploitation of my machines, and I keep them up to date with security patches and scans. I also don’t face known vulnerable systems to the internet, because I’m not dumb. Most of what I do with my personal systems is just best practice to me.
And I’m not even close to secure. Those of you who don’t follow any of these sorts of practices are just inviting hackers in.
LulzSec showed everyone that there is a big problem with the way many large corporations/government affiliates handle security. If we take anything from their brief 50 day run at the internet, we should take this: security should come first.
I realize I’m posting when I’m less than coherent. And I’m also 99% sure that my site will be hacked as soon as I hit “Post”.
Just please remember, “Security First”. Protect your poor data, because it can’t protect itself.
