Remove tag do-not-call
article thumbnail

The JavaScript Supply Chain Paradox: SRI, CSP and Trust in Third Party Libraries

Troy Hunt

This tag was in the source code over at secure.donaldjtrump.com/donate-homepage yet it was pulling script directly off Igor Escobar's GitHub repository for the project. What could you do if you could modify that script and subsequently cause your own arbitrary JavaScript to execute on Trump's website? It was the US Courts too.

article thumbnail

Project Svalbard: The Future of Have I Been Pwned

Troy Hunt

All of these things combined – the prevalence of breaches, the analysis I was doing and the scale of Adobe – got me thinking: I wonder how many people know? Do they realise they were breached? Do they realise they were breached? Do they realise how many times they were breached? I have work to do, thank you guys.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Is India's Aadhaar System Really "Hack-Proof"? Assessing a Publicly Observable Security Posture

Troy Hunt

It's operating in an era of increasingly large repositories of personal data held by both private companies and governments alike. Many people are doing that just now, including myself regarding that "hack-proof" claim. But claiming the service is "hack-proof", that's something I definitely have an issue with.

Security 111
article thumbnail

The Hacker Mind Podcast: Hacking Diversity

ForAllSecure

million InfoSec professionals, as of early 2021 How can that be part of the problem lies in the training pipeline, we really have to do a much better job with that. What organization wouldn't call her, at least for an interview. Tennisha: In my mind I'm saying, why aren't they calling me back right. Apparently plenty.

article thumbnail

The Hacker Mind Podcast: Hacking Diversity

ForAllSecure

million InfoSec professionals, as of early 2021 How can that be part of the problem lies in the training pipeline, we really have to do a much better job with that. What organization wouldn't call her, at least for an interview. Tennisha: In my mind I'm saying, why aren't they calling me back right. Apparently plenty.