Weekly Update 296

Presently sponsored by: Kolide provides endpoint security for teams that value privacy, transparency, and employee productivity. Try Kolide for free today!

Data breaches, 3D printing and passwords – just the usual variety of things this week. More specifically, that really cool Pwned Passwords downloader that I know a bunch of people have been waiting on, and now we’ve finally released. It hits the existing k-anonymity API over 1 million

Continue reading Weekly Update 296→

Downloading Pwned Passwords Hashes with the HIBP Downloader

Presently sponsored by: Kolide provides endpoint security for teams that value privacy, transparency, and employee productivity. Try Kolide for free today!

Just before Christmas, the promise to launch a fully open source Pwned Passwords fed with a firehose of fresh data from the FBI and NCA finally came true. We pushed out the code, published the blog post, dusted ourselves off and that was that. Kind of – there was just

Continue reading Downloading Pwned Passwords Hashes with the HIBP Downloader→

Posted in Uncategorized

Weekly Update 295

Presently sponsored by: Varonis for Salesforce. Detect suspicious behavior and strengthen your Salesforce security posture. Try it free!

A short one this week as the previous 7 days disappeared with AusCERT and other commitments. Geez it was nice to not only be back at an event, but out there socialising and attending all the related things that tend to go along with it. I’ll leave you

Continue reading Weekly Update 295→

Weekly Update 294

Presently sponsored by: Got Slack? Got Macs? Get Kolide: Device security that fixes challenging problems by messaging users on Slack. Try Kolide for 14 days free.

It’s back to business as usual with more data breaches, more poor handling of them and more IoT pain. I think on all those fronts there’s a part of me that just likes the challenge and the opportunity to fix a broken thing. Or maybe I&

Continue reading Weekly Update 294→

Weekly Update 293

Presently sponsored by: Got Slack? Got Macs? Get Kolide: Device security that fixes challenging problems by messaging users on Slack. Try Kolide for 14 days free.

Didn’t get a lot done this week, unless you count scuba diving, snorkelling, spear fishing and laying around on tropical sand cays 😎 This week is predominantly about the time we just spent up on the Great Barrier Reef which has very little relevance to infosec, IoT, 3D

Continue reading Weekly Update 293→

Weekly Update 292

Presently sponsored by: Varonis for Salesforce. Protect Salesforce data from overexposure and cyberthreats. Try it free!

Well that was an unusual ending. Both my mouse and keyboard decided to drop off right at the end of this week’s video and without any control whatsoever, there was no way to end the live stream! Wired devices from kids borrowed, I eventually got back control and

Continue reading Weekly Update 292→

Breach Disclosure Blow-by-Blow: Here’s Why It’s so Hard

Presently sponsored by: Detack. Detect & prevent weak, leaked, shared passwords with EPAS, a patented, privacy compliant solution used in 40 countries. Try it free!

For many years now, I’ve lamented about how much of my time is spent attempting to disclose data breaches to impacted companies. It’s by far the single most time-consuming activity in processing breaches for Have I Been Pwned (HIBP) and frankly, it’s about the

Continue reading Breach Disclosure Blow-by-Blow: Here’s Why It’s so Hard→

Weekly Update 291

Presently sponsored by: Detack. Detect & prevent weak, leaked, shared passwords with EPAS, a patented, privacy compliant solution used in 40 countries. Try it free!

Bit of a long one this week, just due to a bunch of stuff all coinciding at the same time. The drone is obviously the coolest one and it was interesting to hear other people’s experiences with theirs. This is just super cool tech and I can’

Continue reading Weekly Update 291→

Welcoming the North Macedonian Government to Have I Been Pwned

Presently sponsored by: Detack. Detect & prevent weak, leaked, shared passwords with EPAS, a patented, privacy compliant solution used in 40 countries. Try it free!

In my ongoing bid to make more useful information on data breaches available to impacted national governments, today I’m very happy to welcome the 32nd national CERT to Have I Been Pwned, the Republic of North Macedonia! They now join their counterparts across the globe in having free

Continue reading Welcoming the North Macedonian Government to Have I Been Pwned→

Weekly Update 290

Presently sponsored by: Varonis for Salesforce. Detect suspicious behavior and strengthen your Salesforce security posture. Try it free!

I hope scheduling these in advance is working well for everyone, the analytics certainly suggest a much higher viewership so I’m going to keep scheduling these and refining the whole thing further. Other than that, it’s same-same this week with the usual array of breaches, tech

Continue reading Weekly Update 290→