Weekly Update 84

Presently sponsored by: Netsparker – a scalable and dead accurate web application security solution. Scan thousands of web applications within just hours.

This week… I’m tired. A two-day remote workshop on London hours meant very unfriendly times for me here in Aus but hey, it beats jet lag! So just a very short intro this time, I recorded the update this morning whilst I was rather a lot more awake so I’ll…

Continue reading Weekly Update 84→

IRL Analogies Explaining Digital Concepts are Terrible

Presently sponsored by: Netsparker – a scalable and dead accurate web application security solution. Scan thousands of web applications within just hours.

Remember the anti-piracy campaign from years back about “You Wouldn’t Steal a Car”? This was the rather sensationalist piece put together by the Motion Picture Association of America in an attempt to draw parallels between digital piracy and what they viewed as IRL (“In Real Life”…

Continue reading IRL Analogies Explaining Digital Concepts are Terrible→

New Pluralsight Course: Modern Web Security Patterns

Presently sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Contact us for a demo today.

I was chatting to some folks at a bank just the other day about a bunch of modern web security standards. Whilst this blog post is about a Pluralsight course I created with Lars Klint, it only really hit me during that bank conversation just how much there is to…

Continue reading New Pluralsight Course: Modern Web Security Patterns→

Social Media Thread-Hijacking is Nothing More Than Targeted Spam

Presently sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Contact us for a demo today.

I have a vehement dislike of spam. Right there, that’s something you and I have in common because I’m yet to meet a person who says “well actually, I find those Viagra emails I receive every day kinda useful”. We get bombarded by spam on a daily basis…

Continue reading Social Media Thread-Hijacking is Nothing More Than Targeted Spam→

Weekly Update 82 (Honolulu Edition)

Presently sponsored by: Raygun APM is here! Now you can monitor every part of your application, together, in one place.

I’m in Honolulu! And I apologise in advance for the audio quality – the background noise is air conditioning units in the hotel and I didn’t realise quite how much sound they make until I listened to the audio afterwards. Next week I’ll be home and back to a quality…

Continue reading Weekly Update 82 (Honolulu Edition)→

Microsoft Regional Director (Redux)

Presently sponsored by: Raygun APM is here! Now you can monitor every part of your application, together, in one place.

I received a very nice email this week:

Congratulations, your nomination has been accepted to the Microsoft Regional Director program! I am pleased to welcome you back to this worldwide community of technology thought leaders and thank you for being a part of this community.

Just over 2 years ago,…

Continue reading Microsoft Regional Director (Redux)→

Weekly Update 81 (Hawaii Edition)

Presently sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Schedule a meeting during RSA to learn more!

We’re in Hawaii! “We” being Scott Helme and myself and we’re here for the Loco Moco Sec conference which has been a heap of fun (the location may have played a part in that…) And what a location:

Hawaii Pano

Scott joined me for this week’s update and we were…

Continue reading Weekly Update 81 (Hawaii Edition)→

Weekly Update 80

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

It’s a MASSIVE weekly update! The big news for me this week is the 1Password partnership and I’ve really tried to share more about how I came to the decision to work with them in this video. I’ve been so cautious with the way I’ve managed the image of HIBP…

Continue reading Weekly Update 80→

Have I Been Pwned is Now Partnering With 1Password

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

The penny first dropped for me just over 7 years ago to the day: The only secure password is the one you can’t remember. In an era well before the birth of Have I Been Pwned (HIBP), I was doing a bunch of password analysis on data breaches and wouldn’t…

Continue reading Have I Been Pwned is Now Partnering With 1Password→