Collaborate Disseminate
It was Jan last year that I suggested HTTPS adoption had passed the “tipping point”, that is it had passed the moment of critical mass and as I said at the time, “will very shortly become the norm”. Since that time, the percentage of web pages…
Over recent weeks, I’ve begun planning the release of the 3rd version of Pwned Passwords. If you cast your mind back, version 1 came along in August last year and contained 320M passwords. I made all the data downloadable as SHA-1 hashes (for reasons explained in that post) and stood…
One of the most alarming trends I’ve seen in the world of data breaches since starting Have I Been Pwned (HIBP) back in 2013 is the rapid rise of credential stuffing attacks. Per the definition in that link, it simply means this:
Credential stuffing is the automated injection of breached
Continue reading The 111 Million Record Pemiblanc Credential Stuffing List
It’s a week of tweets! I only wrote the one short blog post this week, but I spent a heap of time on the Twitters arguing with people instead so… that’s something? But seriously, there was a huge amount of discussion around HTTPS in particular and some very vocal opinions…
Back in 2011, Microsoft gave me the rather awesome (IMHO) Most Valuable Professional Award for the first time. This is Microsoft’s award for community leadership within a technology discipline which for me at the time, was developer security. I’m confident that award came largely due to the work I did…
Geez it’s nice to be home! I took a ride on the jet ski today which was just one of those typically perfect Gold Coast winters days at a balmy 24C. I cruised around the ocean with a pod of dolphins (probably a dozen of them), grabbed some prawns for…
HTTPS is easy! In fact, it’s so easy I decided to create 4 short videos around 5 minutes each to show people how to enable HTTPS on their site and get all traffic redirecting securely, optimise their HTTPS configuration to get it rating higher than most banks, fix any insecure…
Pretty much every day, I get a reminder from someone about how little people know about their exposure in data breaches. Often, it’s after someone has searched Have I Been Pwned (HIBP) and found themselves pwned somewhere or other. Frequently, it’s some long-forgotten site they haven’t even thought about in…
Continue reading We’re Baking Have I Been Pwned into Firefox and 1Password
Last day away! As much as I enjoy travel, I love going home and I’m wrapping this post up whilst sitting at the airport in Oslo about to begin the epic journey that is travelling back to the other side of the world. It’s been a great trip, but yeah,…
We’re at NDC Oslo! We found a spot on the floor and recorded this a couple of hours before doing our final talk of the event. In this video, we discuss some of what we were planning to cover in that talk, namely HTTPS anti-vaxxers as Scott wrote about earlier…