Weekly Update 158

Presently sponsored by: Kolide is a User Focused Security app for teams that care about the trust and privacy of their users. Start your free 30 day trial now!

It's been a bit of intense country-hopping since the last update so this one is a consolidated "this week in tweets" version. I actually found it kind of interesting going back through the noteworthy incidents of the week in lieu of having original content of my own, see what you think. Given the coming schedule (and a deep, deep desire for a few days of downtime), the next one might be more of the same so I hope it resonates!

References

Because this week is predominantly about noteworthy tweets, I'm going to do the references a little differently. Firstly, with a sponsor shout-out:

Sponsored by Okta: You wouldn’t roll your own hashing algorithm, so why build your own auth? Secure users in mins with a free dev account.

And then the tweets I discussed themselves:

This is fascinating: an amazing story of technology having a profound effect on someone’s wellbeing. Equally, a technology that’s only possible due to constant monitoring and tracking. https://t.co/3pI0OdfYBz

— Troy Hunt (@troyhunt) September 23, 2019

The BBC asked us to look into a range of IoT products.

One of them was a Pineworld lock, from Amazon.

We only had a day; I went for the quickest and most realistic attack. pic.twitter.com/QUKFQUyChO

— Ask Cybergibbons! (@cybergibbons) September 24, 2019

Holy shit! That font isn’t anti-aliased! https://t.co/3vBd3hAhBr

— Troy Hunt (@troyhunt) September 24, 2019

Several months after the fact, CafePress finally acknowledges huge data theft to its customers https://t.co/TxxaOUWJn3

— The Register (@TheRegister) September 23, 2019

@troyhunt #ITBN Hungary! A dream come true 😃😃👍👍 pic.twitter.com/oGS3bI9kcY

— Domonkos Tomcsanyi (@domi007) September 26, 2019

Dating service used fake accounts to attract more paying users. Hmm.... Now where have I heard this story before?#AshleyMadison
cc @briankrebs @troyhunt https://t.co/FdV8akWf4I

— Per Thorsheim (@thorsheim) September 26, 2019

“We take security seriously”https://t.co/OoFfqW97la https://t.co/w0FlcQccTT

— Troy Hunt (@troyhunt) September 27, 2019

There are periodic flareups of anti-HTTPS sentiment thanks to a grumpy technologist who doesn't want to upgrade his sites. Read this by @troyhunt for why even static sites need a security and privacy standard that's been around since 1994. https://t.co/zdxeqP1aBa

— Rogers Cadenhead (@rcade) September 27, 2019

This is so cool @firefox @haveibeenpwned @troyhunt pic.twitter.com/H9UNKFml0L

— Juan Laube (@juanlaube) September 27, 2019

Time to increment the number at the end of the password! https://t.co/3NeqJ84L3f

— Troy Hunt (@troyhunt) September 28, 2019

Done!https://t.co/JmfnU85ynX makes 2FA easier for the normal everyday people.

Inspired by @troyhunt and made with Carrd, an awesome tool by @ajlkn

— Dorin Moise (@dorinmoise) September 28, 2019