Reckon you’ve seen some stupid security things? Here, hold my beer…

Sponsored by: Protect your Mobile and Web Apps from Attacks – Let Gold Security Pentest your Business.

My mate Lars Klint shared this tweet the other day:

Your password is not unique. pic.twitter.com/ga4GwxtzrQ

— Lars Klint (@larsklint) April 16, 2017

Naturally, I passed it on because let’s face it, that’s some crazy shit going on right there. To which the Twitters responded with equal

Continue reading Reckon you’ve seen some stupid security things? Here, hold my beer…→

Wiring a home network from the ground-up with Ubiquiti

Sponsored by: Protect your Mobile and Web Apps from Attacks – Let Gold Security Pentest your Business.

The title of this blog post is what many of us techie folks dream of – free reign to build your own home network! It might seem like a pretty geeky dream (ok, it is a pretty geeky dream), but the reality is that we’re increasingly dependent on our home

Continue reading Wiring a home network from the ground-up with Ubiquiti→

Weekly update 31 (Sydney Opera House edition)

Sponsored by: Gold Security – Keep your Customer’s Data Safe from Breaches – Hackers don’t wait. Act Now!

Another beautiful spot today while I’m back in Sydney working on the agenda for NDC here in August. It’s a quick trip albeit one very jammed-packed as we work through over 700 talk submissions and try to distil them down to the best ~135 of the bunch. There’s a few

Continue reading Weekly update 31 (Sydney Opera House edition)→

New Pluralsight course: Azure Beyond Websites

Sponsored by: Gold Security – Keep your Customer’s Data Safe from Breaches – Hackers don’t wait. Act Now!

I’ve been really actively involved with building things on Microsoft’s Azure cloud for probably about 4 or 5 years now. Many of you will know already that Have I been pwned (HIBP) was built from the ground up on Azure (in fact, one of the reasons I built the service

Continue reading New Pluralsight course: Azure Beyond Websites→

All your websites using StartCom certificates are about to break

Sponsored by: Gold Security – Keep your Customer’s Data Safe from Breaches – Hackers don’t wait. Act Now!

A Twitterer sent me this a few days ago:

.@troyhunt you’ve got SSL issues in Chrome 58+ on @ASafaWeb pic.twitter.com/qtUiMxV9tW

— Jonathan (@Eonasdan) April 13, 2017

Now normally when I get a report about an SSL thing not working (by which we mean TLS, but

Continue reading All your websites using StartCom certificates are about to break→

All your websites using StartCom certificates are about to break

Sponsored by: Gold Security – Keep your Customer’s Data Safe from Breaches – Hackers don’t wait. Act Now!

A Twitterer sent me this a few days ago:

.@troyhunt you’ve got SSL issues in Chrome 58+ on @ASafaWeb pic.twitter.com/qtUiMxV9tW

— Jonathan (@Eonasdan) April 13, 2017

Now normally when I get a report about an SSL thing not working (by which we mean TLS, but

Continue reading All your websites using StartCom certificates are about to break→

Mandatory ISP data retention and the law of unintended consequences

Sponsored by: Gold Security – Keep your Customer’s Data Safe from Breaches – Hackers don’t wait. Act Now!

Well, good one Australia, UK and whoever else has embarked on this hare-brained scheme, you’ve just made things a whole lot worse. Our respective governments (in all their ivory-towered wisdom), have decided that because one of us could one day decide to become a terrorist, they’d better keep a big

Continue reading Mandatory ISP data retention and the law of unintended consequences→

Weekly update 30

Sponsored by: Titania – Find your network security gaps before hackers do with world’s first detailed configuration auditing tool

I didn’t mean to talk for 42 minutes today, but somehow, I kinda ended up there. A good whack of that went to explaining how I’d done the subscription implementation you see below, especially as people had asked why there are two CAPTCHAs and indeed I wanted to explain why

Continue reading Weekly update 30→

New Pluralsight Course: What Every Developer Must Know About HTTPS

Sponsored by: Titania – Find your network security gaps before hackers do with world’s first detailed configuration auditing tool

It’s a great time for HTTPS. Actually, there’s never been a better time and as each day goes by, we see constant reminders of how important it is. Someone sent me a great example of this just the other day by virtue of a bug that had been lodged with

Continue reading New Pluralsight Course: What Every Developer Must Know About HTTPS→