, 2005-04-26
Paranoia is the key to success in the security world. Is it time to worry when other security professionals consider you too paranoid?
Expand all |
Post comment
Security for the Paranoid
2005-04-26
Anonymous (5 replies)
Anonymous (5 replies)
Security for the Paranoid
2005-04-26
Anonymous (1 replies)
Anonymous (1 replies)
Security for the Paranoid
2005-04-26
Jeroen Kemperman (2 replies)
Jeroen Kemperman (2 replies)

The main question here is that you asked if you're bordering insanity. My wife calls me Mr.P (not for you now what, she has another name for that) so I feel qualified enough to give my opinion of where you've crossed the line.
1- three firewalls
That depends if you mean three hardware or two hardware and one software. Three hardware is over the line. Unless you have a very complicated network.
Two hardware and one software may have reason. For example if you have many computers using a single IP. Having one hardware at the network entry point and another to protect your PC from the rest of the network makes sense. Then a software firewall to block any out going calls and you have a reasonably safe system.
2- Password day
The frequency on that depends on the environment. At home should be very sparingly. At work more often. But how often depends on your environment so I can't give you any judgement.
But changing after travels reveals fear of physical intrusion which could be justified at work but not at home. Unless you blocked your son's access to porn sites and you feel he wants to use your computer for that. Mine did that once, but the poor kid couldn't figure out my password and I caught him trying. So here you have a strong maybe.
3- always best security
Nothing wrong with consistency.
4- 14 characters at home
On the line I would say. Excessive for home but not crazy.
5- Smart card
Good idea
6- Wife not knowing network password.
Insane. What if you hit your head on the pavement and lose your memory of your password? How you gonna play solitaire then? Let alone access your important documents to file for divorce. Seriously, if you don't trust your wife you have bigger problems than being too paranoyd. You need to find another wife.
7- mulched documents
recycling is good. Hope you don't do that with your credit card and cds as well. That's not good for the environment.
8- unique email accounts.
thanks for confirming that I'm not uniquely insane. I have one for evey single person, not only online accounts. It's a pain to manage sometimes but it is very easy to identify whose computer got infected and provide me some extra income when they ask me to fix.
9- protect against future threats
If you can think of it, so will somebody else.
10- hardware keyloggers
At work ok. At home... means that you're either insane or that someone in your family is. A professional should be contacted in this case.
11- carry on lugage only
either you don't stay very long or you're very stingy with your presents for your family. I'm starting to understand your family now...
12- surf in a locked box
good practice
13- terrafly
is that a marijuana tree I see on the side of your house?
14- five passwords to email
hmmm... can't think of where two of them are. It's gotta be over the line.
15- Fifty character password for email???
If you type it, yes it is insane. If it is called from an application then it's just weird.
16- delete unused services
good
17- block unused ports
good
18- same day hotfix
risky. Gotta wait a couple to see if the fix is not killing other systems. Or if it's not a trojan from bill.
Conclusion:
You are way over the line on 6, 13, 14, 15. Just passed the line on 1, 2 and 11. On the line on 4, 10, 18. Near the line on 7. And far from the line on 3, 5, 8, 9, 12, 16, 17.
Overall, under my arbritary weighed system you are at 42% where the line is at 50%.
The key here is to see whether you are approaching the line, not moving, or moving away from the line.
By the tone of your article I think that you're moving towards the line, so you may need to take some measures to slow down the approach.
a- Install a keylogger and leave a note on your home desk with a list of your passwords for a couple days when you know people are at home. That may relax you more, or make you look for professional help for your family.
b- Stop spraying that plant with pesticides. I heard they have weird side effects.
c- Find a non-competitive hobby that takes you away from computers and allows you to meet non-computer people. A risky one like riding motorcycles is even better. Or cooking. That will probably make your wife think twice before signing the divorce papers.
Ok, hope you enjoyed my analysis. I'm taking $85 off your bank account now, thanks :-b
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/columns/320/31603#31603