Collaborate Disseminate
It’s hard to believe it, but Sunday 4 December will mark 3 years since I launched Have I been pwned. A huge amount has happened in that time, not just for HIBP but for the industry and indeed for me personally. I certainly didn’t expect it to become what it
Continue reading It’s Have I been pwned’s birthday and I’m doing a live streamed AMA
This has been a mega week with a couple of pretty contentious blog posts which frankly, are the best kind! It gets so boring when everyone just nods and agrees…
But seriously, the one on ad blockers in particular shows just what a mess we’ve gotten ourselves into and the
This has been a mega week with a couple of pretty contentious blog posts which frankly, are the best kind! It gets so boring when everyone just nods and agrees…
But seriously, the one on ad blockers in particular shows just what a mess we’ve gotten ourselves into and the
If you’re here reading this then it probably won’t come as a big surprise but brace yourself anyway – we have a security problem. Yes, yes, I know, it’s all very terrifying and not a day goes by where someone isn’t getting cyber-something’d. As best I can tell from the
Continue reading Get “The Information Security Big Picture” on Pluralsight now!
One of the things I’m finding with running Have I been pwned (HIBP) is that over time, my approach is changing. Nothing dramatic thus far, usually just what I’d call “organic” corrections in direction and usually in response to things I’ve learned, industry events or changes in the way people
Continue reading Have I been pwned and spam lists of personal information
Last week I wrote about how 8 million GitHub profiles were leaked from GeekedIn’s MongoDB which is always a risk when you expose a DB with no auth whatsoever! For any other website, this would be a typical data breach scenario in that info that was meant to remain private
Continue reading Handling people’s personal data is sensitive business
Last week I wrote about how 8 million GitHub profiles were leaked from GeekedIn’s MongoDB which is always a risk when you expose a DB with no auth whatsoever! For any other website, this would be a typical data breach scenario in that info that was meant to remain private
Continue reading Handling people’s personal data is sensitive business
Earlier this year, I wrote about bad user experiences on websites and foremost among these were the shitty things some sites do with ads. Forbes’ insistence that you watch one before manually clicking through to the story, full screen and popover ads and ads that would take over your screen
Lots on this week and I’m very happy to have finally got myself organised and set up an audio podcast feed. It’s getting a heap of downloads already so obviously, people did actually want it and frankly, I’m sorry I didn’t get it organised earlier! That and much more in
Let me make it crystal clear in the opening paragraph: this incident is not about any sort of security vulnerability on GitHub’s behalf, rather it relates to a trove of data from their site which was inappropriately scraped and then inadvertently exposed due to a vulnerability in another service. My