Collaborate Disseminate
I’ve been using Evernote for about 6 years now. Nothing heavy duty, just basic notes that I collect around things like conference talk ideas, code snippets some recipes I often make and other rather mundane things. Anything sensitive goes into 1Password, this is just everyday notes about things I want
Continue reading Evernote is crippling their free service, here’s how to move to OneNote
I just had an absolutely sensational trip over to Europe which kicked off with my favourite event of the year – NDC Oslo. I first came to this event two years ago and talked about How I Hacked my Way to Norway which was the first big international talk I’d
Continue reading How I prepared for the NDC keynote (and other speaker tips)
It’s been a crazy time for data breaches and as I wrote yesterday, we’ve seen a very distinct pattern of historical mega breaches lately. Fling in 2011, LinkedIn in 2012, tumblr in 2013 and the mother of them all, MySpace in, well, we don’t quite know. There’s been no information
Over the period of this month, we’ve seen an interesting trend of data breaches. Any one of these 4 I’m going to talk about on their own would be notable, but to see a cluster of them appear together is quite intriguing.
For example, just yesterday I loaded the Fling
Last week there was no escaping news of the latest data breach. The LinkedIn hack of 2012 which we thought had “only” exposed 6.5M password hashes (not even the associated email addresses so in practice, useless data), was now being sold on the dark web. It was allegedly 167
Continue reading Observations and thoughts on the LinkedIn data breach
Last week we got news of the Rosebutt data breach. This is a very particular class of site and like many others we’ve recently seen compromised, it’s highly likely that members would have preferred to keep their identities secret. It doesn’t matter if you don’t agree with the lifestyle choice
Continue reading Going dark: online privacy and anonymity for normal people
A couple of months ago I did a video titled Understanding CSRF, the video tutorial edition which was a pretty raw run through of the mechanics and defences of cross site request forgery. It’s content I often show in my workshops and I recorded the video pretty much as I
Continue reading Understanding CSP, the video tutorial edition
Round 2 of European travel for me this year has just wrapped up with talks in Brussels for Techorama (which incidentally, was sensational!) followed by a private event for a multinational information services company in Barcelona doing my usual Hack Yourself First workshop. But it’s time for the next one
Continue reading I’m doing a public “Hack Yourself First” workshop in London this June
This was pretty big news 18 months ago:
It was what greeted Sony Pictures employees when they turned up to the office and switched on their machines. Machines infected with malware was one thing – a very bad thing at that – but it got much, much worse for Sony.
Continue reading Understanding firewalls, intrusion detection systems and honeypots with Pluralsight
Let me start with this headline:
Other headlines went on to suggest that you need to change your password right now if you’re using the likes of Hotmail or Gmail, among others. The strong implication across the stories I’ve read is that these mail providers have been hacked and now