Troy Hunt

MARCH 1, 2018

There's a verification process where control of the domain needs to be demonstrated (email to a WHOIS address, DNS entry or a file or meta tag on the site), after which all aliases on the domain and the breaches they've appeared in is returned. At the time of writing, over 110k domain searches have been performed and verified.

Government 226

Government Data breaches Passwords Authentication 226

Troy Hunt

JANUARY 10, 2018

It's the address on Aadhaar's Twitter account , it's the first result on a Google search and time and time again, it's promoted as the site people should go to before doing anything else Aadhaar related. Why HSTS is here and not (consistently) on the root domain is unclear and unfortunately, it means that someone browsing from uidai.gov.in

Hacking 279

Hacking Government Encryption Risk 279

eSecurity Planet

APRIL 14, 2023

Malicious bots can be used to carry out a range of cyber threats like account takeovers and DDoS attacks, so bot protection is an increasingly important defense for web-facing assets. Comprehensive protection: DataDome protects against all types of bots, including credential stuffing, web scraping, and account takeover attacks.

Software 109

Software DDOS Accountability Firewall 109

Troy Hunt

NOVEMBER 25, 2020

Let's start by looking at this from a philosophical standpoint: But here’s the bigger philosophical question: the device still worked fine with the native app, should @TPLINKUK be held accountable for supporting non-documented use cases? Probably “no”, but in a perfect world they’d document local connections by other apps and not break that.

IoT 363

IoT Firmware Risk Manufacturing 363

Cisco Security

AUGUST 29, 2022

Here lies Lesson 1: expected people flow should be taken into account in the RF design process. Use restrictions to prevent modification of accounts, Wi-Fi and prevention of screenshots (to protect the personal information of attendees). Umbrella DNS : Christian Clasen and Alejo Calaoagan. based network (using certificates).

Engineering 98

Engineering Wireless Malware DNS 98