Paul Moore: Information Security Consultant & Researcher
Paul Moore: Information Security Consultant & Researcher
- Posts
- 42 from 18 Sep 2012 to 22 Sep 2026
- Posting
- now and then (1 in the last year)
- Kind
- personal blog
- Feed
- https://paul.reviews/rss/
2026 1
2025 1
2023 1
2022 1
2021 1
2020 2
2017 4
2016 5
- How to choose & remember a long, strong & unique password...
- Bank & Mobile Network Security: For want of a nail...
- EveryKey Revisited: Military grade? Give me a break.
- PwnPhone: Default passwords allow covert surveillance.
- Back in March 2014, I contacted ASDA to report several security vulnerabilities and despite a fix promised "in the next few weeks", little appears to have changed. @Stuho1mez All of our sites are secure, I would advise using Chrome. Thanks, Beth — Asda Service Team (@AsdaServiceTeam) January 14, 201
2015 6
- Update 22/12/2015 I've received several emails regarding this project over the last few months; another landing just a few moments ago. Unbelievably, Everykey has been delayed yet further... with delivery now estimated in February 2016. I'm very grateful to everyone for keeping me informed. However
- Before we begin, let me preface this by saying... I actually quite like Steve Gibson. For all his faults, he often raises very salient points on a variety of topics, typically surrounding security products & services. During the latest "Security Now / TWiT" episode on 20/10/2015, Steve & Leo Laporte
- Behavioral Profiling: The password you can't change.
- Phishing attacks are evolving. The Vivian Gabb story...
- 05/01/2015: Recipero, the company behind Immobilise, NMPR and CheckMEND have now mitigated this risk by limiting access to the "/verify" & pdf generation pages to only authorized users. You're no longer able to view records which you do not own, so although it's undoubtedly more secure, the inabilit
- Roboform Security Revisited: Lies, Deception & Misnomers.
2014 10
- Password Managers: Facts, Fallacies & FUD
- Kickstarter Password Managers: The good, the iffy and the dangerous.
- Update 18/10/2014: TalkTalk have now upgraded their SSL configuration; providing a much healthier "A-" on Qualys. More importantly, it's now PCI compliant. -- Cheap viagra, cialis & diet pills I could benefit from a diet pill or two, but I'm pretty sure my Dad isn't the source of this unbeatable off
- The difference between two-factor and two-step authentication.
- Does Two Factor Authentication Actually Weaken Security?
- Virgin Media: You're only as secure as your weakest link.
- How secure is #Roboform? The 5 minute challenge.
- Council Tax, PCN & Benefits Payment Data Leaked! Are you affected?
- Virgin Media SuperHub: 7 second security flaw...
- Be Cyber Streetwise is a cross-government campaign, funded by the National Cyber Security Programme, and delivered in partnership with the private and voluntary sectors. The campaign is led by the Home Office, working closely with the Department for Business, Innovation and Skills and the Cabinet Of
2013 5
- Update : 10/05/2013 - 4PM: The community forum has returned - with site-wide SSL enabled. Appropriate cookies are httponly & secure and protocol support, key transmission and cipher strength all pass with flying colours. Superb. It's still not immediately clear to the user that the username/password
- CashPlus: "It is secure" - Ooooh no it isn't.
- Forgot your password? You're doing it wrong.
- MyDish.co.uk Security - Missing a vital ingredient?
- Bugcrowd - is crowd-sourced security testing a good idea?