Scott Helme

This looks like it could be really promising! Connection Allowlist: a network firewall, built into the browser https://scotthelme.co.uk/connection-allowlist-a-network-firewall-built-into-the-browser/

Do we think these AI companies should have used AI to build passkey support into their sites? 🤖🔑 https://whynopasskeys.com/tld/ai

It hasn't changed in over a decade, so I've just given my captive portal buster a new look! 😎 http://httpforever.com

We've released a new version of report-uri/dbsc-php thanks to community contributions! Full details: https://github.com/report-uri/dbsc-php/releases Background: https://scotthelme.co.uk/open-sourcing-dbsc-php-a-server-library-for-device-bound-session-credentials-in-php/

Stripe just made CSP a compliance requirement. Merchants completing their annual PCI assessment are now asked to attest that they’ve deployed a Content Security Policy. That’s a major shift from “you should deploy CSP” to “confirm that you have.” Full details: https://blog.report-uri.com/stripe-now-asks-you-to-attest-that-youve-deployed-a-csp/

AOS!!! Weather satellite image download, first attempt. 137.9 MHz — Meteor-M N2-4 Dipole antenna @ 120°, aimed north Raspberry Pi 4B + £40 USB dongle Thirteen minutes as it passes 800 km overhead. No idea yet whether it'll work...

A bunch of these domains went from first registration to being flagged in our threat intel feed in just 30 hours! There's a massive IoC list at the end of the post 💪 https://blog.report-uri.com/chasing-a-clickfix-campaign-from-one-domain-to-a-macos-stealer/