Inside the Synthient Threat Data

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

Where is your data on the internet? I mean, outside the places you’ve consciously provided it, where has it now flowed to and is being used and abused in ways you’ve never expected? The truth is that once the bad guys have your data, it often

Continue reading Inside the Synthient Threat Data→

Weekly Update 473

Presently sponsored by: Malwarebytes Browser Guard blocks phishing, ads, scams, and trackers for safer, faster browsing

This week’s video was recorded on Friday morning Aussie time, and as promised, hackers dumped data the following day. Listening back to parts of the video as I write this on a Sunday morning, pretty much what was predicted happened: data was dumped, it included Qantas, and the

Continue reading Weekly Update 473→

Court Injunctions are the Thoughts and Prayers of Data Breach Response

Presently sponsored by: Malwarebytes Browser Guard blocks phishing, ads, scams, and trackers for safer, faster browsing

You see it all the time after a tragedy occurs somewhere, and people flock to offer their sympathies via the “thoughts and prayers” line. Sympathy is great, and we should all express that sentiment appropriately. The criticism, however, is that the line is often offered as a substitute

Continue reading Court Injunctions are the Thoughts and Prayers of Data Breach Response→

Welcoming CERN to Have I Been Pwned

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

It’s hard to explain the significance of CERN. It’s the birthplace of the World Wide Web and the home of the largest machine ever built, the Large Hadron Collider. The bit that’s hard to explain is, well, I mean, look at it!

Charlotte and

Continue reading Welcoming CERN to Have I Been Pwned→

Weekly Update 471

Presently sponsored by: Oh Dear: All-in-one website monitoring with security alerts for DNS & certificate changes. 10-day free trial. Keep your sites secure!

I’m so happy to finally be getting those HIBP demos out! The first couple are simple, but as I say in this week’s vid, it’s the simple questions we’re still dealing with. As if to taunt me (or prove my point), we

Continue reading Weekly Update 471→

HIBP Demo: Querying the API, and the Free Test Key!

Presently sponsored by: Oh Dear: All-in-one website monitoring with security alerts for DNS & certificate changes. 10-day free trial. Keep your sites secure!

One of the most common use cases for HIBP’s API is querying by email address, and we support hundreds of millions of searches against this endpoint every month. Loads of organisations use this service to understand the exposure of their customers and provide them with better protection against

Continue reading HIBP Demo: Querying the API, and the Free Test Key!→

Weekly Update 470

Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.

Imagine jumping on board a class action after your precious datas have been breached, then sticking through it all the way until a settlement is reached. Then, finally, after a long and arduous battle, cashing in and getting… $1. Well, kinda $1, the ParkMobile class action granted up to $1

Continue reading Weekly Update 470→

Have I Been Pwned Demos Are Now Live!

Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.

Well, one of them is, but what’s important is that we now have a platform on which we can start pushing out a lot more. It’s not that HIBP is a particularly complex system that needs explaining in any depth, but we still get a lot

Continue reading Have I Been Pwned Demos Are Now Live!→