Weekly Update 463

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

I’ve listened to a few industry podcasts discussing the Tea app breach since recording, and the thing that really struck me was the lack of discussion around the privacy implications of the service before the breach. Here was a tool where people were non-consensually uploading photos of others

Continue reading Weekly Update 463→

Weekly Update 462

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

This will be the title of the blog post: “Court Injunctions are the Thoughts and Prayers of Data Breach Response”. It’s got a nice ring to it, and it resonates so much with the response to other disasters where the term is offered as a platitude

Continue reading Weekly Update 462→

11 Years of Microsoft Regional Director and 15 Years of MVP

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

I often wonder how much people in other professions genuinely love the industry they’re in to the point that they’d do it regardless of the money. I’m sure there are examples, but I wonder how many lawyers look forward to doing something in the

Continue reading 11 Years of Microsoft Regional Director and 15 Years of MVP→

Good Riddance Teespring, Hello Fourthwall

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

If I’m honest, I was never that keen on a merch store for Have I Been Pwned. It doesn’t make the code run faster, nor does it load any more data breaches or add any useful features to the service whatsoever. But… people were keen. They

Continue reading Good Riddance Teespring, Hello Fourthwall→

Weekly Update 461

Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.

The Stripe situation is frustrating: by mandating an email address on all invoices, we’re providing a channel that sends customer queries directly through to us rather than via our support portal, which already has the answers many people are raising tickets for. It’s frustrating because it

Continue reading Weekly Update 461→

Welcoming Aura to Have I Been Pwned’s Partner Program

Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.

One of the greatest fears we all have in the wake of a data breach is having our identity stolen. Nefarious parties gather our personal information exposed in the breach, approach financial institutions and then impersonate us to do stuff like this:

So I recently somewhat had my identity stolen,

Continue reading Welcoming Aura to Have I Been Pwned’s Partner Program→

Welcoming Push Security to Have I Been Pwned’s Partner Program

Presently sponsored by: Malwarebytes Browser Guard blocks phishing, ads, scams, and trackers for safer, faster browsing

As we gradually roll out HIBP’s Partner Program, we’re aiming to deliver targeted solutions that bridge the gap between being at risk and being protected. HIBP is the perfect place to bring these solutions to the forefront, as it’s often the point at which

Continue reading Welcoming Push Security to Have I Been Pwned’s Partner Program→

Welcoming Truyu to Have I Been Pwned’s Partner Program

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

I always used to joke that when people used Have I Been Pwned (HIBP), we effectively said “Oh no – you’ve been pwned! Uh, good luck!” and left it at that. That was fine when it was a pet project used by people who live in

Continue reading Welcoming Truyu to Have I Been Pwned’s Partner Program→