ForAllSecure

NOVEMBER 13, 2020

In this episode, Stok talks about his beginnings in enterprise security and his transition into the top tier of bug bounty hunters. Vamosi: Like a lot of us, information security wasn’t necessarily our first line of work. Here’s a really common example. Meet Stok; he’s one of them. I started in journalism.

Communications 40

Communications IT Security Mining 40

ForAllSecure

NOVEMBER 12, 2020

In this episode, Stok talks about his beginnings in enterprise security and his transition into the top tier of bug bounty hunters. Vamosi: Like a lot of us, information security wasn’t necessarily our first line of work. Here’s a really common example. Meet Stok; he’s one of them. I started in journalism.

Communications 40

Communications IT Security Mining 40

ForAllSecure

NOVEMBER 12, 2020

In this episode, Stok talks about his beginnings in enterprise security and his transition into the top tier of bug bounty hunters. Vamosi: Like a lot of us, information security wasn’t necessarily our first line of work. Here’s a really common example. Meet Stok; he’s one of them. I started in journalism.

Communications 40

Communications IT Security Mining 40

Robert's Db2

JUNE 6, 2013

OK, now imagine you're a security administrator. Mike Kearney, a colleague of mine who's a z/OS security expert, leads workshops that cover, among other things, enterprise identity mapping. That trusted context would define the circumstances in which the privileges granted to a role could be exercised by a user.

Authentication 48

Authentication Passwords Mining Access 48

Troy Hunt

JANUARY 16, 2019

I've written before about what's involved in verifying data breaches and it's often a non-trivial exercise. If @1Password was to integrate with my newly released Pwned Passwords k-Anonymity model so you could securely check your exposure against the service (it'd have to be opt in, of course). Oh wow - look at this!

Data breaches 112

Data breaches Passwords Risk Personal data 112

ForAllSecure

MARCH 10, 2021

Ollam: So lockpicking has always been a huge part of the hacker world, and the community, both as a hobby interest, and also now increasingly as with faces like mine as a professional endeavor. You don't want to give them the hardest exercise or the heaviest weights that will discourage them. The lock is just verifying that.

IT 52

IT Security Marketing Access 52

ForAllSecure

MARCH 9, 2021

Ollam: So lockpicking has always been a huge part of the hacker world, and the community, both as a hobby interest, and also now increasingly as with faces like mine as a professional endeavor. You don't want to give them the hardest exercise or the heaviest weights that will discourage them. The lock is just verifying that.

IT 52

IT Security Marketing Access 52

Troy Hunt

DECEMBER 4, 2017

I read this while wandering around in LA on my way home from sitting in front of US Congress and explaining security principles to a government so it felt like a timely opportunity to share my own view on the matter: This illustrates a fundamental lack of privacy and security education. needs to meet this need and be secure also.

Passwords 81

Passwords Access Risk Security 81

ForAllSecure

MAY 2, 2023

That, of course, was not all, but it is an example of how someone -- anyone on the internet -- can take a photo or blog post or Yelp review from social media, or some other seemingly random open source item and tie it back to a crime. Mine was 2000. of pleasure, or rage, where operational security levels are much lower.

IT 40

IT Sales Security Honeypots 40

Troy Hunt

FEBRUARY 10, 2020

My views are shaped by a life that's very public due to the nature of what I do and as such, my kids receive more exposure than most (the picture above, for example). For example, my son teaching kids to code in London a couple of weeks ago: Teaching kids to code at #NDCLondon with @CodeCombat. They can't change their passcodes.

Privacy 141

Privacy Access IT Education 141

Troy Hunt

MARCH 2, 2020

For example, I was regularly asked if I'd ever received any legal threats which is apparently pretty normal for any M&A process, but you can imagine why it'd be particularly interesting when dealing with a heap of data originally obtained via illegal methods. of the company.

IT 136

IT Mining Sales Data breaches 136

Troy Hunt

APRIL 15, 2019

For example, there was VTech back in 2015 who leaked millions of kids' info after they registered with "smart" tablets. The Gator3 watch turned out to have even more serious security flaws, storing parents and kids’ voice messages on an openly available webserver. but the link to the privacy and security policies was dead.

Passwords 111

Passwords Privacy Manufacturing Access 111

Brandeis Records Manager

SEPTEMBER 19, 2016

Like most people, I prefer to have a reasonable sense of job security, as long as my interest is engaged. A recent futurist reading binge has been an exercise in masochism, or deer-in-the-headlights simulation, or emperor’s new clothes realization. Perhaps we will all just work in information security.

Blockchain 62

Blockchain Records Management Unstructured data Artificial Intelligence 62

Troy Hunt

MARCH 3, 2021

Most organisation begin with "we take the security of your data seriously", layer on lawyer speak, talk about credit cards not being exposed and then promise to provide further updates as they come to hand. In total, the file has 43,015 unique email addresses (including mine) which is a far cry less than the total row count.

Passwords 145

Passwords Data breaches Mining Risk 145