HIBP Demo: Querying the API, and the Free Test Key!

Presently sponsored by: Oh Dear: All-in-one website monitoring with security alerts for DNS & certificate changes. 10-day free trial. Keep your sites secure!

One of the most common use cases for HIBP’s API is querying by email address, and we support hundreds of millions of searches against this endpoint every month. Loads of organisations use this service to understand the exposure of their customers and provide them with better protection against

Continue reading HIBP Demo: Querying the API, and the Free Test Key!

Weekly Update 470

Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.

Imagine jumping on board a class action after your precious datas have been breached, then sticking through it all the way until a settlement is reached. Then, finally, after a long and arduous battle, cashing in and getting… $1. Well, kinda $1, the ParkMobile class action granted up to $1

Continue reading Weekly Update 470

Have I Been Pwned Demos Are Now Live!

Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.

Well, one of them is, but what’s important is that we now have a platform on which we can start pushing out a lot more. It’s not that HIBP is a particularly complex system that needs explaining in any depth, but we still get a lot

Continue reading Have I Been Pwned Demos Are Now Live!

Weekly Update 469

Presently sponsored by: Malwarebytes Browser Guard blocks phishing, ads, scams, and trackers for safer, faster browsing

So I had this idea around training a text-to-speech engine with my voice, then using that to speak over the Sonos at home to announce AI-driven events, such as people ringing the doorbell. A few hours’ worth of video from these weekly updates fed into ElevenLabs and wammo! Here

Continue reading Weekly Update 469

Weekly Update 468

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

I only just realised, as I prepared this accompanying blog post, that I didn’t talk about one of the points in the overview: food. One of my fondest memories as a child living in Singapore and now as an adult visiting there is the food. It’s

Continue reading Weekly Update 468

Home Assistant + Ubiquiti + AI = Home Automation Magic

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

It seems like every manufacturer of anything electrical that goes in the house wants to be part of the IoT story these days. Further, they all want their own app, which means you have to go to gazillions of bespoke software products to control your things. And they’re

Continue reading Home Assistant + Ubiquiti + AI = Home Automation Magic

Weekly Update 466

Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.

I’m fascinated by the unwillingness of organisations to name the “third party” to which they’ve attributed a breach. The initial reporting on the Allianz Life incident from last month makes no mention whatsoever of Salesforce, nor does any other statement I can find from

Continue reading Weekly Update 466

That 16 Billion Password Story (AKA “Data Troll”)

Presently sponsored by: Malwarebytes Browser Guard blocks phishing, ads, scams, and trackers for safer, faster browsing

Spoiler: I have data from the story in the title of this post, it’s mostly what I expected it to be, I’ve just added it to HIBP where I’ve called it “Data Troll”, and I’m going to give everyone a

Continue reading That 16 Billion Password Story (AKA “Data Troll”)

Posted in Uncategorized