I recently saw a tweet that got me thinking, then it got me reading, then it kept me busy for about an hour. In that short space of time I managed to take control of a lot of domains that were up for grabs. Of course, as the title suggests,…
I'm a strong supporter of 2FA and we implemented it some time ago on Report URI. All users can use 2FA on their account for free, whether they pay for a subscription or not, and it represents a great way to boost the security of your account. However, problem does…
I was debating whether or not to call Clear Site Data a Security Header but in the end I decided I would. During the use of a web app we can leave various pieces of data in the browser that we'd like to clear out if the user logs out…
We use Cloudflare Workers extensively at Report URI and over the last few months we've been testing a major update to how we use them. With this recent change we've seen a monstrous drop in the volume of traffic we're handling at our origin. Here's how we did it.Report…
I was really excited recently when I purchased somewhat of a dream car for myself. I've long been a 'car person' but having a car that I really, really wanted is something new for me. Wanting to look after my new p̶l̶a̶y̶ ̶t̶o̶y̶ mode of…
I've been using Ghost as my blogging platform for quite some time and I've also been using Cloudflare for a good while too. Recently these companies came together and Ghost(Pro) started using Cloudflare by default. Whilst this is probably a great thing for most, it left me wihout control…
Microsoft recently announced that they were going to remove the XSS Filter from their Edge browser. I have some mixed feelings about this so I'm going to go through them here and gather some feedback from others in the community too. The XSS Filter XSS mitigations were first built into…
Regular readers will know that I make extensive use of Azure Table Storage in both Report URI and Security Headers. As Report URI has grown and we’re now processing billions of reports per month for our users we’re always interested in performance or efficiency savings wherever possible. We…
After the recent major update to Report URI you may have noticed some changes to the free tier accounts. This post is here to explain those changes and the reasons behind them. Limiting Free AccountsIt's 1 year and 1 day since we launched the commercial service that is Report URI…
Last week we announced support for a new type of report on Report URI, Network Error Logging, or NEL reports. These reports are going to unlock a seriously huge amount of really helpful data so it's well worth me doing a deep dive on exactly how you can use NEL…
