Collaborate Disseminate
This has been an insane week, not least because of spending the day yesterday installing a Ubiquiti network as part of my upcoming course. A heap of fun, but one little glitch threw my day out. Another glitch with my Pwned Passwords service threw my day today out so I’m
Last week I wrote about Passwords Evolved: Authentication Guidance for the Modern Era with the aim of helping those building services which require authentication to move into the modern era of how we think about protecting accounts. In that post, I talked about NIST’s Digital Identity Guidelines which were recently
Continue reading Introducing 306 Million Freely Downloadable Pwned Passwords
Edit: The following day, I loaded another set of passwords which has brought this up to 320M. More on why later on.
Last week I wrote about Passwords Evolved: Authentication Guidance for the Modern Era with the aim of helping those building services which require authentication to move into the
Continue reading Introducing 306 Million Freely Downloadable Pwned Passwords
Over the weekend, a Have I Been Pwned (HIBP) subscriber contacted me after they found their Spotify credentials online. It turns out that this particular woman went searching for her specific password after finding “some guy listening to Mexican music from a foreign device on my acct”. In the search
Continue reading Pastes on Have I Been Pwned Are No Longer Publicly Listed
Over the weekend, a Have I Been Pwned (HIBP) subscriber contacted me after they found their Spotify credentials online. It turns out that this particular woman went searching for her specific password after finding “some guy listening to Mexican music from a foreign device on my acct”. In
Continue reading Pastes on Have I Been Pwned Are No Longer Publicly Listed
Only a couple of months ago, I did a talk titled “The Responsibility of Disclosure: Playing Nice and Staying Out of Prison”. The basic premise was to illustrate where folks finding security vulnerabilities often go wrong in their handling of the reporting, but I also wanted to show
Continue reading Kids Pass Just Reminded Us How Hard Responsible Disclosure Is
Only a couple of months ago, I did a talk titled “The Responsibility of Disclosure: Playing Nice and Staying Out of Prison”. The basic premise was to illustrate where folks finding security vulnerabilities often go wrong in their handling of the reporting, but I also wanted to show how organisations
Continue reading Kids Pass Just Reminded Us How Hard Responsible Disclosure Is
This week I’ve had my head down working on a new course for Ubiquiti, the guys who make the very fine wifi things I now have in my house and since writing about them, many others do too. I’ll be sharing more about that in the coming weeks but whilst
This week I’ve had my head down working on a new course for Ubiquiti, the guys who make the very fine wifi things I now have in my house and since writing about them, many others do too. I’ll be sharing more about that in the coming weeks but whilst
In the beginning, things were simple: you had two strings (a username and a password) and if someone knew both of them, they could log in. Easy.
But the ecosystem in which they were used was simple too, for example in MIT’s Time-Sharing Computer, considered to be the first computer
Continue reading Passwords Evolved: Authentication Guidance for the Modern Era