Weekly Update 211

Presently sponsored by: Tines. 22% of breaches begin with phishing (DBIR 2020). Submit suspicious emails and attachments to Phish.ly for free immediate analysis!

This week there’s a lot of connected things: connected shoes, connected garage camera and connected GoPro. And then there’s Scott’s Grindr account. Awkward. Actually, since recording this weekly update the details of the issue have now been released so I’ll talk about that in more detail next week. This week

Continue reading Weekly Update 211→

Hacking Grindr Accounts with Copy and Paste

Presently sponsored by: Tines. 22% of breaches begin with phishing (DBIR 2020). Submit suspicious emails and attachments to Phish.ly for free immediate analysis!

Sexuality, relationships and online dating are all rather personal things. They’re aspects of our lives that many people choose to keep private or at the very least, share only with people of our choosing. Grindr is “The World’s Largest Social Networking App for Gay, Bi, Trans, and Queer People” which

Continue reading Hacking Grindr Accounts with Copy and Paste→

Weekly Update 210

Presently sponsored by: Join the Microsoft Reactor community for workshops, panels and events to expand your skillset across a range of technologies and topic areas

Wow, 4 years already. Regardless of where I’ve been in the world or the stresses that have been going on in my personal life, every single week without exception there’s been a video. This makes 210 of them now, and these days they’re live from a much more professional setup

Continue reading Weekly Update 210→

Padlocks, Phishing and Privacy; The Value Proposition of a VPN

Presently sponsored by: safepass.me helps you quickly secure your AD passwords and reduce the risk of Credential Stuffing

I want a “secure by default” internet with all the things encrypted all the time such that people can move freely between networks without ever needing to care about who manages them or what they’re doing with them. I’m a massive proponent of Let’s Encrypt’s and Cloudflare’s missions to secure

Continue reading Padlocks, Phishing and Privacy; The Value Proposition of a VPN→

Weekly Update 208

Presently sponsored by: The biggest return on security investment is getting your time back. Scale your defenses and regain control with Tines Security Automation.

The highlight of my week was absolutely getting the Shelly 1 units behind a couple of my light switches working as I’d always dreamed. It just opens up so many automation possibilities that I’m really excited about what I might do in the future with them now. When I get

Continue reading Weekly Update 208→

Weekly Update 207

Presently sponsored by: AppTrana – A Risk Based Managed Cloud WAF that includes Security Assessment of your Site, Instant Managed protection, 24×7 Monitoring & CDN

I kicked off a little bit earlier on this one in order to wrap up before the Burning Minds keynote, and it’s interesting to see just how much difference that little sliver of sunlight makes to the video quality. Check the very start of the video versus the very end;

Continue reading Weekly Update 207→

We Didn’t Encrypt Your Password, We Hashed It. Here’s What That Means:

Presently sponsored by: AppTrana – A Risk Based Managed Cloud WAF that includes Security Assessment of your Site, Instant Managed protection, 24×7 Monitoring & CDN

You’ve possibly just found out you’re in a data breach. The organisation involved may have contacted you and advised your password was exposed but fortunately, they encrypted it. But you should change it anyway. Huh? Isn’t the whole point of encryption that it protects data when exposed to unintended parties?

Continue reading We Didn’t Encrypt Your Password, We Hashed It. Here’s What That Means:→

Weekly Update 206

Presently sponsored by: Credential stuffing is currently the biggest threat to organisations, find out how you can protect your network right now with safepass.me

Since I recorded this morning, I’ve had an absolute breakthrough – I CAN OPEN MY GARAGE DOOR WITH MY WATCH! I know, I know, it shouldn’t be this hard and that’s a lot of the point I’m making in this week’s video. Having said that, some parts have been hard

Continue reading Weekly Update 206→

Weekly Update 205

Presently sponsored by: Edgescan: The award-winning, fullstack, vulnerability management solution. All vulnerabilities expertly verified for false-positive freedom.

Between still feeling a little groggy after hitting the water hard on an early wake boarding session then my camera overheating and shutting down towards the end of the live stream, this wasn’t the smoothest of weekly updates, I still got across everything I needed to. I’m especially excited about

Continue reading Weekly Update 205→