scotthelme.bsky.social
Hi, I'm Scott Helme, a Security Researcher, Entrepreneur and International Speaker. I'm the creator of Report URI and Security Headers, and I deliver world renowned training on Hacking and Encryption. https://scotthelme.co.uk
👤 Joined on 14 July 2023
Followers
Following
Total Posts
@scotthelme.bsky.socialI'm still not sold on passkeys, but this is well worth a read.
Show PostQuite a few people have sent me the "Passkeys are a trap. Do not use them." post on Substack. The post recommends people abandon passkeys and stick to passwords + TOTP, citing what appears to be concerns with attestation. I’ve written a rebuttal: scotthelme.co.uk/passkeys-are...
Show PostThis is an excellent writeup - thank you for taking the time to post it.
Show PostAn abandoned analytics tag, a re-registered domain, and store visitors funnelled to a DarkSword iPhone exploit. We traced the chain from a forgotten script to an exploit kit and spyware payload. When did you last audit your third-party scripts?.. blog.report-uri.com/abandoned-an...
Show PostA fake CAPTCHA, a trojanised file manager and a new C2 domain every Thursday. We traced a ClickFix campaign and recovered its DGA, letting us predict future C2 domains. Here’s the attack chain and the IOCs defenders can use 👇 blog.report-uri.com/a-fake-captc...
Show Post