Scott Helme (Page 2)

Report URI Penetration Test 2021

Wow, where did that last year go?! It's time for our annual penetration test again over at Report URI and just like we did last year, we'll be publishing the...

Free Post

Pwned Passwords

Sketchy Pwned Passwords

After playing with some more probabilistic data structures and talking about Count-Min Sketch, I wanted to expand on my previous work with the Pwned Passwords data set. This is quite...

Free Post

Report URI

Frequency analysis on hundreds of billions of reports at Report URI: Count-Min Sketch

At the time of writing, Report URI has processed a total of 669,142,999,794 reports. That's a lot of reports and sometimes it can be difficult to work...

Free Post

Report URI

When Pwned Passwords Bloom!

I recently wrote about Bloom Filters, the hugely space efficient, probabilistic data structures, and how great they can be. I wanted to create a demonstration of just how useful they...

Free Post

Report URI

Frequency analysis on hundreds of billions of reports at Report URI: Bloom Filters

Have we seen this report before? It sounds like a simple question to ask of a service that collects and processes hundreds of millions of reports per day, and in...

Working around expired Root Certificates

Free Post

Let's Encrypt

Working around expired Root Certificates

Should clients care about when a Root Certificate expires? That's a bit of an odd question, and the first time I asked myself this question, the answer was a resounding...

Free Post

Let's Encrypt

Let's Encrypt Root Expiration - Post-Mortem

Well, the Internet Apocalypse came and went! Due to the recent expiration of the Let's Encrypt intermediate and root certificates, I saw more widespread issues than I was expecting, but...

Free Post

Let's Encrypt's Root Certificate is expiring!

On 30th September 2021, the root certificate that Let's Encrypt are currently using, the IdentTrust DST Root CA X3 certificate, will expire. You may or may not need to do...

Free Post

BMW M140i Project

The M140i project post - Part 15

I took a bit of a break from writing up my work on the M140i but I'm back and there are a few things I want to cover! This post...

Free Post

Open Redirect

The danger of open redirects!

Like everyone else, I get a lot of spam emails that range from downright annoying through to deceptive phishing emails that are really dangerous. Today I got one of the...

Scott Helme

Hi, I'm Scott Helme, a Security Researcher, Entrepreneur and International Speaker. I'm the creator of Report URI and Security Headers and I deliver world renowned training on Hacking and Encryption.

Report URI Penetration Test 2021

Sketchy Pwned Passwords

Frequency analysis on hundreds of billions of reports at Report URI: Count-Min Sketch

When Pwned Passwords Bloom!

Frequency analysis on hundreds of billions of reports at Report URI: Bloom Filters

Working around expired Root Certificates

Let's Encrypt Root Expiration - Post-Mortem

Let's Encrypt's Root Certificate is expiring!

The M140i project post - Part 15

The danger of open redirects!

Upcoming Events

Cheat Sheets

Projects

Upcoming Events

Cheat Sheets

Projects

Follow