Soft-Launching and Open Sourcing the Have I Been Pwned Rebrand

Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.

Designing the first logo for Have I Been Pwned was easy: I took a SQL injection pattern, wrote “have i been pwned?” after it and then, just to give it a touch of class, put a rectangle with rounded corners around it:

Job done! I mean really, what

Continue reading Soft-Launching and Open Sourcing the Have I Been Pwned Rebrand→

Weekly Update 442

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

We survived the cyclone! That was a seriously weird week with lots of build-up to an event that last occurred before I was born. It’d been 50 years since a cyclone came this far south, and the media was full of alarming predictions of destruction. In the end,

Continue reading Weekly Update 442→

We’re Backfilling and Cleaning Stealer Logs in Have I Been Pwned

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

I think I’ve finally caught my breath after dealing with those 23 billion rows of stealer logs last week. That was a bit intense, as is usually the way after any large incident goes into HIBP. But the confusing nature of stealer logs coupled with an overtly long

Continue reading We’re Backfilling and Cleaning Stealer Logs in Have I Been Pwned→

Weekly Update 441

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

Processing data breaches (especially big ones), can be extremely laborious. And, of course, everyone commenting on them is an expert, so there’s a heap of opinions out there. And so it was with the latest stealer logs, a corpus of data that took the better part of a

Continue reading Weekly Update 441→

Processing 23 Billion Rows of ALIEN TXTBASE Stealer Logs

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

I like to start long blog posts with a tl;dr, so here it is:

We’ve ingested a corpus of 1.5TB worth of stealer logs known as “ALIEN TXTBASE” into Have I Been Pwned. They contain 23 billion rows with 493 million unique website and

Continue reading Processing 23 Billion Rows of ALIEN TXTBASE Stealer Logs→

Weekly Update 440

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

Wait – it’s Tuesday already?! When you listen to this week’s (ok, last week’s) video, you’ll probably get the sense I was a bit overloaded. Yeah, so that didn’t stop, and the stealer log processing and new feature building just

Continue reading Weekly Update 440→

Weekly Update 439

Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.

We’re now eyeball-deep into the HIBP rebrand and UX work, totally overhauling the image of the service as we know it. That said, a guiding principle has been to ensure the new looks is immediately recognisable and over months of work, I think we’ve achieved that.

Continue reading Weekly Update 439→

Weekly Update 438

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

I think what’s really scratching an itch for me with the home theatre thing is that it’s this whole geeky world of stuff that I always knew was out there, but I’d just never really understood. For example, I mentioned waveforming in the video,

Continue reading Weekly Update 438→