Collaborate Disseminate
I have multiple Yahoo data breaches. I have a Twitter data breach. I have Facebook data breaches. I know they are data breaches from those sources because people told me they are, ergo, they’re data breaches. Except they’re not – they’re all fake. Problem is though, fake data breaches don’t
Continue reading Data breach claims are often poorly researched, unsubstantiated and ultimately fake
I’ve been doing the weekly updates for a couple of months now and by all accounts, they’ve been very well-received. One of the early pieces of feedback I got though was that I should also publish them as an audio podcast so that people can listen to them in the
Continue reading My weekly updates are now available as an audio podcast
I write a blog with a lot of security things on it so understandably, it upsets me somewhat when my site throws security warnings:
I’d had a number of people report this and indeed I’d seen it myself, albeit transiently. Diving into the console, I found the source of the
Continue reading Disqus’ mixed content problem and fixing it with a CSP
I’ve done a number of “Play by Play” courses for Pluralsight this year on a range of topics including Social Engineering with my mate Lars Klint, Deconstructing the Hack with my mate Gary Eimerman, Modernizing Your Deployment Strategy with Octopus Deploy with my mate Damo Brady and the latest one
Continue reading New Pluralsight course: Exploring the Internet of Vulnerabilities
Let’s get this out of the way early – I did not shoot this video on a green screen! When I first watched it, I couldn’t believe how amazing the picture quality was and the first thought I had when I saw it was the green screen one. The new
A couple of weeks ago I wrote about the leak of data from the Red Cross’ Blood Service down here in Australia. Many people were shocked that you could have a situation where troves of personal data were obtainable not through any advanced hacking technique, but by merely downloading a
Continue reading The Capgemini leak of Michael Page data via publicly facing database backup
I’ve had this blog post in one form or another of draft for several years now. I hesitated to complete it, in part because at the best of times cultural observations can easily be misinterpreted and also in part because of the role I had in working with many outsourcing
Continue reading Offshoring roulette: lessons from outsourcing to India, China and the Philippines
Apparently, after doing several weekly updates from different locations across the globe, last week’s one from my home office was rather boring. Now maybe that was just a noisy minority saying that, I don’t know, but I thought I’d test the theory and this week I headed out on jet
I’m increasingly of the view that both my time and my sanity are worth more and more as the years progress. Particularly in my independent life, it really can be that black and white – if I can’t work, it costs me money. Plus, I want to be happy and
Continue reading Ubiquiti all the things: how I finally fixed my dodgy wifi
Here’s a little-known fact for folks that have only tuned in more recently: I had a life before doing security things. I know, it seems like a long time ago now, but there was a time where all the other things that go into the software development process were highly
Continue reading New Pluralsight Course: Modernizing Your Deployment Strategy with Octopus Deploy