Weekly Update 109

Presently sponsored by: Netsparker – dead accurate web application security scanning solution – Scan websites for SQL Injection, XSS & other vulnerabilities

Last one before home time! But it has been an epic trip and as I say in the video, this is by far my most enjoyable trip to the US yet after probably a dozen over the last few years (that includes Hawaii, too). Given the interest after my pointing

Continue reading Weekly Update 109→

Weekly Update 108

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

I’m in Texas! And I’ve had enough BBQ to last me a very long time. I’m here doing a couple of speaking events and other related things as well as taking some time out with my wife to see the sites. As such, it’s a bit quieter this week but

Continue reading Weekly Update 108→

Breaking Azure Functions with Too Many Connections

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

For the most part, Have I Been Pwned (HIBP) runs very smoothly, especially given how cheaply I run many parts of the service for. Occasionally though, I screw up and get something wrong that interrupts the otherwise slick operation and results in some outage. Last weekend was one such occasion

Continue reading Breaking Azure Functions with Too Many Connections→

Weekly Update 107

Presently sponsored by: Quantum computing may spell the end of RSA and elliptic curve cryptography. Get ahead of quantum threats with tips from DigiCert’s CTO

It’s another “business as usual” week; past events, upcoming events, major security news, someone forgetting to renew a certificate and a new Pluralsight course. Actually, thinking about it more, this is possibly the most normal week I can remember, which is kinda disconcerting considering the (potential) impact of some of

Continue reading Weekly Update 107→

New Pluralsight Course: Adapting to the New Normal: Embracing a Security Culture of Continual Change

Presently sponsored by: Quantum computing may spell the end of RSA and elliptic curve cryptography. Get ahead of quantum threats with tips from DigiCert’s CTO

I take more pleasure than I probably should in watching the bewilderment within organisations as the technology landscape rapidly changes and rushes ahead of them. Perhaps “pleasure” isn’t the right word, is it more “amusement”? Or even “curiosity”? Whichever it is, I find myself rhetorically asking “so you just expected

Continue reading New Pluralsight Course: Adapting to the New Normal: Embracing a Security Culture of Continual Change→

Weekly Update 106

Presently sponsored by: DigiCert Pro Tips: From locks to thermostats, IoT devices are everywhere in hospitality. Keep them secure with these 6 guidelines.

Home again! Another NDC is down and I talk a little about how the talks were rated and about PubConf (make sure you get to one of these one day!) I’ve got another couple of weeks at home before any more travel and I’ll talk more about the next things…

Continue reading Weekly Update 106→

Mmm… Pi-hole…

Presently sponsored by: DigiCert Pro Tips: From locks to thermostats, IoT devices are everywhere in hospitality. Keep them secure with these 6 guidelines.

I have a love-hate relationship with ad blockers. On the one hand, I despise the obnoxious ads that are forced down our throats at what seems like every turn. On the other hand, I appreciate the need for publishers to earn a living so that I can consume their hard-earned…

Continue reading Mmm… Pi-hole…→

Weekly Update 105

Presently sponsored by: Build scalable, reliable and secure cloud native applications with Tech Fabric

It’s another day-late weekly update courtesy of another hectic week. Scott and I were at NDC Sydney doing a bunch of talks and other events and I just simply didn’t get time to push this out until sitting at the airport waiting for the plan home.

This week’s update is…

Continue reading Weekly Update 105→

Extended Validation Certificates are Dead

Presently sponsored by: Build scalable, reliable and secure cloud native applications with Tech Fabric

That’s it – I’m calling it – extended validation certificates are dead. Sure, you can still buy them (and there are companies out there that would just love to sell them to you!), but their usefulness has now descended from “barely there” to “as good as non-existent&…

Continue reading Extended Validation Certificates are Dead→

Weekly Update 104

Presently sponsored by: Netsparker – dead accurate web application security scanning solution – Scan websites for SQL Injection, XSS & other vulnerabilities

We’re on a boat! This week, Scott Helme is back in town so I’m treating him to a rare sight for the Englishman – sunshine ☀️

We’re also talking about my .NET Conf talk, Chrome’s visual changes (and rolling back some of them), the FreshMenu data breach, getting better at filtering…

Continue reading Weekly Update 104→