In a cafe, a zombie is warning some patrons "Whatever you do, don't use public wi-fi!" The patrons are wearing hacklore.org t-shirts.
π 2010 called... π It wants its security advice back! π€£
hacklore.org π§
π Boost to your network to bury hacklore before it rises again. π§β οΈ
I just learned of this hacklore website. π€π
(Someone needs to create a juice-jacking emoji...)
usbcondom.com
A zombie looking at itself in the mirror, asking "Wait... is my advice outdated?" A hacklore.org sign hangs in the background.
β Giving outdated cybersecurity advice misdirects people from the tasks that will actually help them be secure. It's time to let go of zombie advice! π§ββοΈ
π Check out hacklore.org where you can learn what tactics work against the most common crimes.
π¬ And sign up for the mailing list!
More public wi-fi hacklore! π€¦ π
www.pcworld.com/article/3074...
Bravo to the Cyber Readiness Institute for joining the movement to stop hacklore! People and organizations are rethinking security guidance in light of today's technology and threat landscapes. Check out their blog below, and visit hacklore.org. π
cyberreadinessinstitute.org/news-and-eve...
π
It's not too early to start your Cybersecurity Awareness Month planning, especially if that planning involves removing hacklore from your materials. π
βΉοΈ More information here: hacklore.org
π¬ Join the newsletter: buttondown.com/hacklore
π£ Spread the word!
Very good point. You are correct that there are different ways to define "need". I'm specifically thinking about the misconceptions around public wi-fi and account security.
There are some serious problems with this article, but the main point is right: Some personal VPN products falsely claim, or imply, that using their products will solve the online privacy problem. It's just not true.
www.cnet.com/tech/service...
Zombie gives a lecture on cyber-security best practices from 2010, including advice to avoid public wi-fi and USB charging stations, and to change passwords every 90 days. The audience is laughing.
It's 2026 and time to stop getting cybersecurity advice from the undead. π§ββοΈπ§ββοΈ
Ready to let go of zombie advice? Start at hacklore.org! π
π£ Spread the word!! π£
π Wi-Fi public, codes QR, juice jacking, Bluetooth, cookies, rotation de mots de passe β on croit encore Γ ces mythes de cybersΓ©curitΓ©?
Nouvel Γ©pisode avec Guillaume Ross sur le projet @hacklore.bsky.social
π§ Web: bit.ly/46SsOTd
π§ Spotify: bit.ly/3ZG5lkq
π§ YouTube: bit.ly/46bIUHt
#CybersΓ©curitΓ©
Someone just suggested that Hacklore.org recommend using a protected DNS service. How should we think about this proposal? π€
This site from the Government of Canada promotes some classic #hacklore.
Does anyone have contacts in the appropriate department? I'd like to help them update their guidance. ππ
www.getcybersafe.gc.ca/en
This FTC page is free of hacklore. Bravo! ππ₯³
consumer.ftc.gov/node/78344
Man using a laptop at an airport coffee shop with a zombie barista creeping up behind him.
π§ββοΈ Still giving out zombie advice about public wi-fi? Still warning about evil baristas hacking people's devices in the cafe?
Check out hacklore.org for the guidance that will actually help everyday people stay secure online. π
Excellent!
What guidance would you suggest providing instead?
A woman wearing a Hacklore.org t-shirt laughing at a zombie telling her to not use public wi-fi.
Tired of zombie cybersecurity advice that should have been dead and buried by now? π§
Stop letting the undead waste your time.
Visit hacklore.org for the cure! Real-world threat models. No fear theater. Just the facts. π
Boost to your network! π
π₯ Killer post about hacklore from Huntress π₯
www.huntress.com/cybersecurit...
They write, "Drop the lore, defend the core". Brilliant!!
ππ
Is any of this advice hacklore? π€
www.huffpost.com/entry/home-s...
π£ The latest Hacklore newsletter is out!
In this Valentineβs Day issue, weβre celebrating the truest gift of love: helping someone level up their security with advice that actually stops real-world attacks.
Spread the word to your followers!
β€οΈπΉπβ€οΈπΉπβ€οΈπΉπβ€οΈπΉ
buttondown.com/hacklore/arc...
Apologies for the spoilers, but desperate times call for desperate action! π± π
Someone needs to send the NYT the correct answer to this puzzle: www.hacklore.org/passwords
It's not 2010 anymore, but you wouldn't know it from all the #hacklore out there... π€
Looks like it was deleted. Was it good? π€
Ex-CISA officials, CISOs dispel 'hacklore,' spread cybersecurity truths
This is Hacklore outdated security concern #3!
Our culture rewards spectacular claims ("OMG! You'll get hacked if you use coffee shop wi-fi!") and largely ignores the unglamorous work of saying βthis isnβt true anymore.β
Nevertheless, we persist. π
hacklore.org
Retirement office party for a zombie. The cake says "hacklore.org".
π§ββοΈ Time to retire that zombie advice!
See hacklore.org!
(This post was sent from cafe wi-fi! π)
Help identify, document, and retire zombie advice at hacklore.org πͺ¦
Letβs put bad guidance to rest and make room for what actually works.
But fear not! Unlike the movies, there is a cure. You can stop repeating advice that should have been dead and buried years ago.
Start by asking simple questions:
π Does this advice map to how real compromises actually happen today?
π Is there evidence from the field, not just vibes?
Zombie advice is hard to kill because itβs culturally transmitted, not empirically maintained.
Blogs copy blogs. Talks cite talks. Fear spreads faster than data.
If youβve been bitten, you may find yourself spreading zombie advice too.
π£ βEveryone says this, so it must be true.β
π§ ππππππ ππ
ππππ /ΛzΓ€mbΔ ΙdΛvΔ«s/ π―π°πΆπ― Cybersecurity guidance that has outlived the threat model that created it, continuing to circulate despite changes in technology, attacker behavior, or empirical evidence.
π§΅...
