Weekly Update 114

Presently sponsored by: Build scalable, reliable and secure cloud native applications with Tech Fabric

It’s a no-blog week, but that doesn’t mean any less is happening! This week, I’ve finally wrapped up the Lego Bugatti, got myself into the new iPad, connected my washing machine (I know, I know, I didn’t plan it this way!) and then isolated it on a separate IoT network.

Continue reading Weekly Update 114→

Weekly Update 113

Presently sponsored by: Netsparker – a scalable and dead accurate web application security solution. Scan thousands of web applications within just hours.

Bit of a change of scenery this week; I’ve gone to the other end of the house whilst invasive palm tree roots are water blasted out from beneath my office window as part of our garden renos. But hey, that’s a nice place to be on a day like this

Continue reading Weekly Update 113→

Beyond Passwords: 2FA, U2F and Google Advanced Protection

Presently sponsored by: Netsparker – a scalable and dead accurate web application security solution. Scan thousands of web applications within just hours.

Last week I wrote a couple of different pieces on passwords, firstly about why we’re going to be stuck with them for a long time yet and then secondly, about how we all bear some responsibility for making good password choices. A few people took some of the points I

Continue reading Beyond Passwords: 2FA, U2F and Google Advanced Protection→

Add-ons, Extensions and CSP Violations: Playing Nice with Content Security Policies

Presently sponsored by: Netsparker – a scalable and dead accurate web application security solution. Scan thousands of web applications within just hours.

You know what I really like? A nice, slick, clean set of violation reports from the content security policy (CSP) I run on Have I Been Pwned (HIBP). You know what I really don’t like? Logging on to Report URI and being greeted with something like this:

This blog post

Continue reading Add-ons, Extensions and CSP Violations: Playing Nice with Content Security Policies→

Weekly Update 112

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

Wow, didn’t the passwords discussions go nuts this week! Passwords suck and they must die, they’re never going to die, people are using bad ones, people should be able to use bad ones, developers are at fault and my personal favourite in the “how on earth did you reach that

Continue reading Weekly Update 112→

When Accounts are “Hacked” Due to Poor Passwords, Victims Must Share the Blame

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

It’s just another day on the internet when the news is full of headlines about accounts being hacked. Yesterday was a perfect example of that with 2 separate noteworthy stories adorning my early morning Twitter feed. The first one was about HSBC disclosing a “security incident” which, upon closer inspection,

Continue reading When Accounts are “Hacked” Due to Poor Passwords, Victims Must Share the Blame→

It’s End of Life for ASafaWeb

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

A lot has changed in the Microsoft technology world in the last 7 years since I launched ASafaWeb in September 2011. Windows XP is no longer the dominant operating system (Win 7 actually caught up the month I launched ASafaWeb). Internet Explorer is no longer the dominant browser (Chrome was

Continue reading It’s End of Life for ASafaWeb→

Here’s Why [Insert Thing Here] Is Not a Password Killer

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

These days, I get a lot of messages from people on security related things. Often it’s related to data breaches or sloppy behaviour on behalf of some online service playing fast and loose with HTTPS or passwords or some other easily observable security posture. But on a fairly regular basis,

Continue reading Here’s Why [Insert Thing Here] Is Not a Password Killer→

Weekly Update 111

Presently sponsored by: DigiCert — RSA and ECC won’t last forever. We’re getting a head start on quantum-proof security now. See how.

On my first attempt at recording this, I decided the framing was crooked after a couple of minutes so I started again. On my second attempt, the PC BSOD’d after 42 mins and I thought I’d lost all the audio. I hadn’t, so on the third attempt I completed the

Continue reading Weekly Update 111→