Remove tag twitter
article thumbnail

The JavaScript Supply Chain Paradox: SRI, CSP and Trust in Third Party Libraries

Troy Hunt

This tag was in the source code over at secure.donaldjtrump.com/donate-homepage yet it was pulling script directly off Igor Escobar's GitHub repository for the project. I woke up on the other side of the world to most people this morning and my Twitters had gone nuts overnight with this story: Ummm, so yeah, this is *bad*. Until now.

article thumbnail

Project Svalbard: The Future of Have I Been Pwned

Troy Hunt

Increasingly, I was writing about what I thought was a pretty fascinating segment of the infosec industry; password reuse across Gawker and Twitter resulting in a breach of the former sending Acai berry spam via the latter. To be completely honest, it's been an enormously stressful year dealing with it all.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Is India's Aadhaar System Really "Hack-Proof"? Assessing a Publicly Observable Security Posture

Troy Hunt

It's operating in an era of increasingly large repositories of personal data held by both private companies and governments alike. Precedents like Stuxnet , created by the US and Israeli governments to damage the Iranian nuclear program by targeting air-gapped centrifuges via 4 previously unknown "zero-day" flaws.

Security 111
article thumbnail

The Hacker Mind Podcast: Hacking Diversity

ForAllSecure

So I went and got a master's in it from Johns Hopkins University, and continue there for a little while and then it actually ended up switching over to a job where I was working in information assurance and quality assurance for the government, I've been government facing for, you know, pretty much my entire career at this point.

article thumbnail

The Hacker Mind Podcast: Hacking Diversity

ForAllSecure

So I went and got a master's in it from Johns Hopkins University, and continue there for a little while and then it actually ended up switching over to a job where I was working in information assurance and quality assurance for the government, I've been government facing for, you know, pretty much my entire career at this point.