Security Awareness Tank Tops

Administrators tends to su or login as root to perform privileged actions on Linux systems while they shouldn't. It is a bad practice to use root account so, instead, the recommendation is to use a non-root user to elevate with sudo to perform those actions or give them enough capabilities.

Not an A.I., not a robot, I am a human being.

i am committed to safety design

i am committed to safety design

This classic T-shirt features the slogan "Big Brother is Watching You" is a reminder of the ever-present threat of surveillance.

an average family owns multiple cameras a person, but who owns the footage? it seldom stays on the devices… and once uploaded. it can by seen, tracked and used by everyone, no. not the photos, but your face, your unchangeable identification. your “self”

A design about cybersecurity awareness for Halloween. Don't miss the chance to provide a dose of training to your coworkers and avoid them to click in the wrong pumpkin!

A good practice is to patch or update all the components and devices that belongs to the organisation network regularly. Failing to do so, will increase the risk of being compromised.

HTTPOnly flag for cookies should be a must. This avoids other unwanted usages of cookies from your browser like scripts and only restricts its usage for HTTP.

An awareness slogan for your organisation to concern your coworkers to stop writing down passwords in physical notes or notepad.

Instead of giving systematically sudo or suid privileges when a non root user cannot perform an action on the system, the Linux capabilities are one of the alternatives to keep the least privilege principle.

If the office macros or scripts are not disabled through GPO in your network then you have to deal with potential malware associated to office documents.

Besides training your coworkers to identify any phishing attempt, it would be great also to remind them to report the phishing attempt so, the antispam or the phishing prevention will learn to filter them and also, the soc team will receive a sample to further extract the IOC to blacklist.

anti surveillance design

Yet another security awareness design, this time related to one of the weakness to address in terms of Linux configuration or hardening. If you stop writing the previous commands in the history, you can avoid the passwords being wrote on it when admins use them in commands as parameters.

An awareness design to avoid Linux administrators to provide sudo privileges for every single permission denied they get, when trying to run any command with a non root user.

normalize online privacy - a cause that we should all get behind. bring awareness with this simple distressed digital typography design.

It is important to share urls or domains with one of the dots surrounded by brackets when it comes to threat intelligence, since they can be clicked accidentally and could end up in disastrous results. This is a black background with white letters design version.

Don't Trust Your Network?

This design represents some of the technical security controls that you might want to put in place in order to practice layered defense.

One of the ways to reduce the risk is to limit the impact in case of compromise so practicing least privilege is the way.

INSECURITY Security Guard (Front/Back Print)

Reusing passwords, specially when using the same for social media, personal email and your employer accounts, increases the chance that attackers could access to your jobs accounts. Therefore, avoid doing such practice.

If you are being watched by drones then this might be for you!

If you think that your architecture doesn't needs to be reviewed then try to threat modeling it. Probably you'll know about new weakness overlooked previously thanks to the different points of view provided by the different participants.

i am committed to safety design

This mummy, when not trying to sneak up behind you to scare you, is wanting to ensure you stay safer from cybercrime, so he wants you to wrap up your passwords nice and secure, in perhaps better wrappign than he has as he is looking a wee bit unwrapped...

Macros or scripts in office documents are useful to automate actions on them, however, it is also a tool for any eventual attacker to further compromise the organisation network.