Aussie Telcos are Failing at Some Fundamental Security Basics

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

Recently, I’ve witnessed a couple of incidents which have caused me to question some pretty fundamental security basics with our local Aussie telcos, specifically Telstra and Optus. It began with a visit to the local Telstra store earlier this month to upgrade a couple of phone plans which resulted in…

Continue reading Aussie Telcos are Failing at Some Fundamental Security Basics→

A Scammer Tried to Scare Me into Buying Their Security Services – Here’s How It Went Down

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

Here’s the tl;dr – someone named “Md. Shofiur R” found troyhunt.com on a “free online malware scanner” and tried to scare me into believing my site had security vulnerabilities then shake me down for a penetration test. It didn’t work out so well for…

Continue reading A Scammer Tried to Scare Me into Buying Their Security Services – Here’s How It Went Down→

The Legitimisation of Have I Been Pwned

Presently sponsored by: Build scalable, reliable and secure cloud native applications with Tech Fabric

There’s no way to sugar-coat this: Have I Been Pwned (HIBP) only exists due to a whole bunch of highly illegal activity that has harmed many individuals and organisations alike. That harm extends all the way from those in data breaches feeling a sense of personal violation (that’s certainly how…

Continue reading The Legitimisation of Have I Been Pwned→

Weekly Update 78 (San Fran Edition)

Presently sponsored by: Netsparker – dead accurate web application security scanning solution – Scan websites for SQL Injection, XSS & other vulnerabilities

Last day of travel! The weekly update is out late due to a packed week which I endured whilst battling a cold as well which has made it pretty rough. But other than that, it was a fantastic week recording Pluralsight courses and meeting with some really cool tech companies…

Continue reading Weekly Update 78 (San Fran Edition)→

Weekly Update 77 (Seattle Edition)

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

I’m in Seattle! This has been a mega week at the Microsoft MVP and Regional Director summits and as I say in the video, I’m actually a little run down now that it’s all done. But I’ve had a wonderful week of meeting a heap of people and seeing some…

Continue reading Weekly Update 77 (Seattle Edition)→

Weekly Update 76

Presently sponsored by: DigiCert: IoT security can be filled with overwhelming identity challenges. One simple change can help you address nearly every one of them.

Massive, massive week! I’m not trying to make these videos longer (and the next two while I’m overseas will definitely be shorter), but yeah, this week was a biggie. Pwned Passwords dominated throughout, interrupted only by a few thousand new data breaches going into HIBP. But the big one -…

Continue reading Weekly Update 76→

The UK and Australian Governments Are Now Monitoring Their Gov Domains on Have I Been Pwned

Presently sponsored by: DigiCert: IoT security can be filled with overwhelming identity challenges. One simple change can help you address nearly every one of them.

If I’m honest, I’m constantly surprised by the extent of how far Have I Been Pwned (HIBP) is reaching these days. This is a little project I started whilst killing time in a hotel room in late 2013 after thinking “I wonder if people actually know where their data…

Continue reading The UK and Australian Governments Are Now Monitoring Their Gov Domains on Have I Been Pwned→

I Wanna Go Fast: Why Searching Through 500M Pwned Passwords Is So Quick

Presently sponsored by: DigiCert: IoT security can be filled with overwhelming identity challenges. One simple change can help you address nearly every one of them.

In the immortal words of Ricky Bobby, I wanna go fast. When I launched Pwned Passwords V2 last week, I made it fast – real fast – and I want to talk briefly here about why that was important, how I did it and then how I’ve since shaved another…

Continue reading I Wanna Go Fast: Why Searching Through 500M Pwned Passwords Is So Quick→

I’ve Just Added 2,844 New Data Breaches With 80M Records To Have I Been Pwned

Presently sponsored by: DigiCert: IoT security can be filled with overwhelming identity challenges. One simple change can help you address nearly every one of them.

tl;dr – a collection of nearly 3k alleged data breaches has appeared with a bunch of data already proven legitimate from previous incidents, but also tens of millions of addresses that haven’t been seen in HIBP before. Those 80M records are now searchable, read on for the full story:…

Continue reading I’ve Just Added 2,844 New Data Breaches With 80M Records To Have I Been Pwned→