New Pluralsight Course: Defending Against JavaScript Keylogger Attacks on Payment Card Information

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

Only a few weeks ago, I wrote about a new GDPR course with John Elliott. We’ve been getting fantastic feedback on that course and I love the way John has been able to explain GDPR in a way that’s actually practical and makes sense! In my experience, that’s a bit…

Continue reading New Pluralsight Course:
Defending Against JavaScript Keylogger Attacks on Payment Card Information
→

New Pluralsight Course: Bug Bounties for Researchers

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

Earlier this year, I spent some time in San Fran with friend and Bugcrowd founder Casey Ellis where we recorded a Pluralsight “Play by Play” titled Bug Bounties for Companies. I wrote about that in the aforementioned post which went out in May and I mentioned back then…

Continue reading New Pluralsight Course: Bug Bounties for Researchers→

Weekly Update 98

Presently sponsored by: Build scalable, reliable and secure cloud native applications with Tech Fabric

It’s the coffee-machine weekly update! A slight change of scenery but other than that, it’s business as usual. I’m going to keep this intro super-brief because it’s very near beer o’clock and I have a very important task to go and take care of:

BBQ time 😎 pic.twitter.com/yq5hXOGABt

Continue reading Weekly Update 98→

Why No HTTPS? Questions Answered, New Data, Path Forward

Presently sponsored by: Build scalable, reliable and secure cloud native applications with Tech Fabric

So that little project Scott Helme and I took on – WhyNoHTTPS.com – seems to have garnered quite a bit of attention. We had about 81k visitors drop by on the first day and for the most part, the feedback has been overwhelming positive. Most people have said it’s…

Continue reading Why No HTTPS? Questions Answered, New Data, Path Forward→

Weekly Update 97

Presently sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Schedule a meeting during Black Hat to learn more!

Alrighty, 2 big things to discuss today and I’ll jump right into them here:

Exactis: it’s hard to know where to even start with this one and frankly, the more I think about the more frustrated I am that services like this even exist in the first place. But they…

Continue reading Weekly Update 97→

Why No HTTPS? Here’s the World’s Largest Websites Not Redirecting Insecure Requests to HTTPS

Presently sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Schedule a meeting during Black Hat to learn more!

As of today, Google begins shipping Chrome 68 which flags all sites served over the HTTP scheme as being “not secure”. This is because the connection is, well, not secure so it seems like a fairly reasonable thing to say! We’ve known this has been coming for a…

Continue reading Why No HTTPS? Here’s the World’s Largest Websites Not Redirecting Insecure Requests to HTTPS→

Weekly Update 96

Presently sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Schedule a meeting during Black Hat to learn more!

This week I’m doing my best “dress like a professional” impersonation as I prepare to record the next episode in our quarterly Creating a Security-centric Culture series. We’re putting these out for free every few months and right after wrapping up this week’s update, I recorded the next…

Continue reading Weekly Update 96→

Seamless A/B Testing, Deployment Slots and DNS Rollover with Azure Functions and Cloudflare Workers

Presently sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Schedule a meeting during Black Hat to learn more!

Two of my favourite developer things these days are Azure Functions and Cloudflare Workers. They’re both “serverless” in that rather than running on your own slice of infrastructure, that concept is abstracted away and you get to focus on just code executions rather than the logical bounds of…

Continue reading Seamless A/B Testing, Deployment Slots and DNS Rollover with Azure Functions and Cloudflare Workers→

New Pluralsight Course: The State of GDPR – Common Questions and Misperceptions

Presently sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Contact us for a demo today.

I love so many of the underlying principles of GDPR as it relates to protecting our personal data. I love the idea of us providing it for a specific purpose and it not being used beyond that. I love that it seeks to give us more control over access to…

Continue reading New Pluralsight Course: The State of GDPR – Common Questions and Misperceptions→

Weekly Update 95

Presently sponsored by: Netsparker – a scalable and dead accurate web application security solution. Scan thousands of web applications within just hours.

Not only has this been a super busy blogging week, it’s also the week my coffee machine decided to die 😢 It’s not terminal, it’s just continually leaking so it’s off for a service and I have to fuel my productivity through other means.

But fuel it I did and I…

Continue reading Weekly Update 95→