Fighting API Bots with Cloudflare’s Invisible Turnstile

Presently sponsored by: Unpatched devices keeping you up at night? Kolide can get your entire fleet updated in days. It’s Device Trust for Okta. Watch the demo!

There’s a “hidden” API on HIBP. Well, it’s not “hidden” insofar as it’s easily discoverable if you watch the network traffic from the client, but it’s not meant to be called directly, rather only via the web app.

Continue reading Fighting API Bots with Cloudflare’s Invisible Turnstile

Weekly Update 361

Presently sponsored by: Unpatched devices keeping you up at night? Kolide can get your entire fleet updated in days. It’s Device Trust for Okta. Watch the demo!

This week hasd been manic! Non-stop tickets related to the new HIBP domain subscription service, scrambling to support invoicing and resellers, struggling our way through some odd Stripe things and so on and so forth. It’s all good stuff and there have been very few issues of note

Continue reading Weekly Update 361

All New Have I Been Pwned Domain Search APIs and Splunk Integration

Presently sponsored by: Unpatched devices keeping you up at night? Kolide can get your entire fleet updated in days. It’s Device Trust for Okta. Watch the demo!

I’ve been teaching my 13-year old son Ari how to code since I first got him started on Scratch many years ago, and gradually progressed through to the current day where he’s getting into Python in Visual Studio Code. As I was writing the new domain

Continue reading All New Have I Been Pwned Domain Search APIs and Splunk Integration

Welcome to the New Have I Been Pwned Domain Search Subscription Service

Presently sponsored by: Secure your assets, identity and online accounts with our award-winning ID theft protection. Get started with Aura today.

This is a big one. A massive one. It’s the culmination of a solid 7 months of work that finally, as of now, is live. The full back story is in my blog post from mid-June about The Big 5 Announcements but to save you trawling through all

Continue reading Welcome to the New Have I Been Pwned Domain Search Subscription Service

Weekly Update 359

Presently sponsored by: EPAS by Detack. No EPAS protected password has ever been cracked and won’t be found in any leaks. Give it a try, millions of users use it.

Somewhere in the next few hours from publishing this post, I’ll finally push the HIBP domain search changes live. I’ve been speaking about it a lot in these videos over recent weeks so many of you have already know what it entails, but it’s

Continue reading Weekly Update 359

Weekly Update 358

Presently sponsored by: Kolide ensures that if a device isn’t secure, it can’t access your apps. It’s Device Trust for Okta. Watch the demo today!

IoT, breaches and largely business as usual so I’ll skip that in the intro to this post and jump straight to the end: the impending HIBP domain search changes. As I say in the vid, I really value people’s feedback on this so if nothing else,

Continue reading Weekly Update 358

Weekly Update 356

Presently sponsored by: Americans lost $8.8B to identity theft in 2022. Secure your online info with Aura the #1 rated identity theft protection. Start free trial.

Today was a bit back-to-back having just wrapped up the British Airways Magecart attack webinar with Scott. That was actually a great session with loads of engagement and it’s been recorded to so look out for that one soon if you missed it. Anyway, I filled this week&

Continue reading Weekly Update 356

Lucky MVP 13

Presently sponsored by: Americans lost $8.8B to identity theft in 2022. Secure your online info with Aura the #1 rated identity theft protection. Start free trial.

Each year since 2011, Microsoft has sent me a lovely email around this time:

I’ve been fortunate enough to find a passion in life that has allowed me to do what I love and make a great living out of it all whilst contributing to the community in

Continue reading Lucky MVP 13

Posted in MVP

Weekly Update 355

Presently sponsored by: EPAS by Detack. No EPAS protected password has ever been cracked and won’t be found in any leaks. Give it a try, millions of users use it.

Alrighty, “The Social Media”. Without adding too much here as I think it’s adequately covered in the video, since last week we’ve had another change at Twitter that has gotten some people cranky (rate limits) and another social media platform to jump onto (Threads)

Continue reading Weekly Update 355

Posted in Uncategorized

Weekly Update 354

Presently sponsored by: Kolide can get your cross-platform fleet to 100% compliance. It’s Zero Trust for Okta. Want to see for yourself? Book a demo.

I’m in Thailand! It’s spectacular here, and even more so since recording this video and getting out of Bangkok and into the sorts of natural beauty you see in all the videos. Speaking of which, rather than writing more here (whilst metres away from the most

Continue reading Weekly Update 354