Collaborate Disseminate
I’ve been at the AusCERT conference this week and whilst I scored a nomination for “Individual Excellence in Information Security”, it wasn’t meant to be this year (or the last 2 times!) but I did get a shiny certificate 🙂 It was a great event and I really enjoyed meeting a
You know what people really like? Government regulation!
…crickets…
Ok, maybe not so much, but this one is actually really important. The General Data Protection Regulation is an EU reg that kicks in on 25 May 2018 so we’ve got bang on a year to get organised. It’s important within
Hang on – where did my week go?! WannaCry came out of the blue and accosted a big whack of my time starting first thing Saturday. And then, just as it was quietening down, I go and write about not turning off Windows Update and holy shit, did people come
You know what really surprised me about this whole WannaCry ransomware problem? No, not how quickly it spread. Not the breadth of organisations it took offline either and no, not even that so many of them hadn’t applied a critical patch that landed a couple of months earlier. It was
Continue reading Don’t tell people to turn off Windows Update, just don’t
I woke up to a flood of news about ransomware today. By virtue of being down here in Australia, a lot happens in business hours around the world while we’re sleeping but conversely, that’s given me some time to collate information whilst everyone else is taking a break. The WannaCry
Continue reading Everything you need to know about the WannaCry / Wcry / WannaCrypt ransomware
The big news this week has been dealing with that massive volume of data I loaded into HIBP a week ago. A combination of the mechanics of getting it loaded, the flood of feedback once I did and actually trying to prepare myself for upcoming talks has made it a
Over the last few days, I’ve loaded more than 1 billion new records into Have I been pwned(HIBP). As I describe in that blog post, this data was from two very large “combo lists”, that is email address and password pairs created by malicious parties in order to help
Continue reading Here are all the reasons I don’t make passwords available via Have I been pwned
Wow, what a day! I got up at about 3:30 this morning and have been going non-stop dealing with the masses of feedback as a result of the billion-and-a-bit breached records I’m presently loading into HIBP. I talk about it in the blog post, but the “small” one of
The short version: I’m loading over 1 billion breached accounts into HIBP. These are from 2 different “combo lists”, collections of email addresses and passwords from all sorts of different locations. I’ve verified their accuracy (including my own record in one of them) and many hundreds of millions of the
A few years back, I added a donations page to Have I been pwned (HIBP). Now as I explained at the time, I didn’t particularly need them to cover my hard-cash outgoings because I run the thing on a shoestring, but as I explain on that page, it takes a
Continue reading Microsoft Flow + Azure Storage + WebJobs + MailChimp + Outlook