Welcoming the Isle of Man Government to Have I Been Pwned

Presently sponsored by: Join Snyk’s May 15th event to discover how to establish a Security Champions program, bridging security and development

Today we welcome the 39th government and first self-governing British Crown Dependency to Have I Been Pwned, The Isle of Man. Their Office of Cyber-Security & Information Assurance (OCSIA) now has free and open access to query the government domains of their jurisdiction.

We’re delighted and encouraged to

Continue reading Welcoming the Isle of Man Government to Have I Been Pwned→

Passkeys for Normal People

Presently sponsored by: Join Snyk’s May 15th event to discover how to establish a Security Champions program, bridging security and development

Let me start by very simply explaining the problem we’re trying to solve with passkeys. Imagine you’re logging on to a website like this:

And, because you want to protect your account from being logged into by someone else who may obtain your username and password,

Continue reading Passkeys for Normal People→

Weekly Update 450

Presently sponsored by: Join Snyk’s May 15th event to discover how to establish a Security Champions program, bridging security and development

Looking back at this week’s video, it’s the AI discussion that I think about most. More specifically, the view amongst some that any usage of it is bad and every output is “slop”. I’m hearing that much more broadly lately, that AI

Continue reading Weekly Update 450→

The Have I Been Pwned Alpine Grand Tour

Presently sponsored by: Join Snyk’s May 15th event to discover how to establish a Security Champions program, bridging security and development

I love a good road trip. Always have, but particularly during COVID when international options were somewhat limited, one road trip ended up, well, “extensive”. I also love the recent trips Charlotte and I have taken to spend time with many of the great agencies we’ve

Continue reading The Have I Been Pwned Alpine Grand Tour→

Welcoming The Gambia National CSIRT to Have I Been Pwned

Presently sponsored by: Join Snyk’s May 15th event to discover how to establish a Security Champions program, bridging security and development

Today, we’re happy to welcome the Gambia National CSIRT to Have I Been Pwned as the 38th government to be onboarded with full and free access to their government domains. We’ve been offering this service for seven years now, and it enables national CSIRTs to gain

Continue reading Welcoming The Gambia National CSIRT to Have I Been Pwned→

You’ll Soon Be Able to Sign in to Have I Been Pwned (but Not Login, Log in or Log On)

Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.

How do seemingly little things manage to consume so much time?! We had a suggestion this week that instead of being able to login to the new HIBP website, you should instead be able to log in. This initially confused me because I’ve been used to logging on

Continue reading You’ll Soon Be Able to Sign in to Have I Been Pwned (but Not Login, Log in or Log On)→

Weekly Update 446

Presently sponsored by: Malwarebytes Browser Guard blocks phishing, ads, scams, and trackers for safer, faster browsing

After an unusually long day of travelling from Iceland, we’ve finally made it to the land of Guinness, Leprechauns, and a tax haven for tech companies. This week, there are a few more lessons from the successful phish against me the previous week, and in happier news, there

Continue reading Weekly Update 446→

A Sneaky Phish Just Grabbed my Mailchimp Mailing List

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

You know when you’re really jet lagged and really tired and the cogs in your head are just moving that little bit too slow? That’s me right now, and the penny has just dropped that a Mailchimp phish has grabbed my credentials, logged into my account

Continue reading A Sneaky Phish Just Grabbed my Mailchimp Mailing List→

Posted in Uncategorized