Collaborate Disseminate
I’m doing this week’s update a little back to front due to the massive incident in South Africa involving what looks like pretty much the entire population. I’ve spent the first half an hour just talking about that incident in a way that I hope is consumable for the layperson….
This week, I started looking into a large database backup file which turned out to contain the personal data of a significant portion of the South African population. It’s an explosive situation with potentially severe ramifications and I’ve been bombarded by questions about it over the last 48 hours. This…
Continue reading Questions about the Massive South African “Master Deeds” Data Breach Answered
It’s finally time: it’s time the pendulum swings further towards the “secure by default” end of the scale than what it ever has before. At least insofar as securing web traffic goes because as of this week’s Chrome 62’s launch, any website with an input box is now…
It’s another Pluralsight course! I actually recorded Emerging Threats in IoT with Lars Klint back in June whilst we were at the NDC conference in Oslo. It’s another “Play by Play” course which means it’s Lars and I sitting there having a conversation like this:
We choose to…
Continue reading New Pluralsight Course: Emerging Threats in IoT
A couple of years ago, I was heavily involved in analysing and reporting on the massive VTech hack, the one where millions of records were exposed including kids’ names, genders, ages, photos and the relationship to parents’ records which included their home address. Part of this data was collected via…
After being couped up inside most of the week due to some (very unusual) bad weather, when the sun came out today the only responsible thing to do was to jump on the jet ski and head off to an island to do my weekly update. As much as it…
We all jumped on “the Equifax dumpster fire bandwagon” recently and pointed to all the things that went fundamentally wrong with their disclosure process. But it’s equally important that we acknowledge exemplary handling of data breaches when they occur because that’s behaviour that should be encouraged.
Last week,…
Continue reading Disqus Demonstrates How to Do Breach Disclosure Right
Lots of writing and lots of other stuff too this week. A claim that HIBP is bogus, new breaches appearing (and oh boy, wait until you see all of these ones…), some new bits from Ubiquiti and then the actual writing of things. I’ve got a lot of material on…
Almost 2 and a half years ago to the day, I left the corporate world. It’s funny looking back on it because on the one hand, 2 and a half years isn’t that long but on the other hand, it was a lifetime ago; my life is totally different today…
One of the by-products of an increasingly public profile is that companies want you to promote their things. You see this all the time in all walks of life whether it be product placement in movies, celebs sponsored by car companies or indeed the sponsor banner you see at the…
Continue reading Here’s How I Decide What I Endorse and How I Ensure Transparency