1 2<!DOCTYPE html> 3<html lang="en" data-color-scheme="light" dir="ltr"> 4 <head> 5 <title>security - Paul Moore: Information Security Consultant & Researcher</title> 6 <meta charset="utf-8"> 7 <meta name="viewport" content="width=device-width, initial-scale=1.0"> 8 <meta name="view-transition" content="same-origin"> 9 10 11<link rel="preconnect" href="https://fonts.bunny.net" crossorigin> 12<link rel="stylesheet" href="https://fonts.bunny.net/css?family=inter:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i 13&display=swap"> 14<link rel="stylesheet" href="https://fonts.bunny.net/css?family=fira-sans:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i 15&display=swap"> 16 17 18<style> 19 :root { 20 --color-accent: #d70947; 21 --cover-image: url(https://paul.reviews/content/images/2019/10/20190524_001312.jpg); 22 --font-heading: var(--gh-font-heading, "Inter"); 23 --font-body: var(--gh-font-body, "Fira Sans"); 24 --post-card-image-aspect-ratio: 16/9; 25 --radius-card: 12px; 26 } 27</style> 28
29<script> 30 window.themeConfig = { 31 colorScheme: "light", 32 site: { 33 url: "https://paul.reviews", 34 title: "Paul Moore: Information Security Consultant & Researcher", 35 description: "Paul Moore: Information Security Consultant & Researcher", 36 accentColor: "#d70947", 37 icon: "https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400-2.jpg", 38 facebook: "", 39 twitter: "@paul_reviews", 40 primaryNavigation: [ 41 { 42 label: "Home", 43 url: "https://paul.reviews" 44 }, 45 { 46 label: "Twitter", 47 url: "https://twitter.com/paul_reviews" 48 }, 49 { 50 label: "Email Me", 51 url: "mailto:[email protected]" 52 }, 53 ], 54 secondaryNavigation: [ 55 ] 56 } 57 } 58</script>
58 59 60 61 <link rel="stylesheet" type="text/css" href="/assets/build/style.css?v=cuOq2iyAg7cq-yFD"> 62 <link rel="manifest" data-manifest /> 63 64
64<script type="module" src="/assets/build/main.js?v=Z7T24uSJU1BXpjis"></script>
64 65 66 <link rel="icon" href="https://paul.reviews/content/images/size/w256h256/format/jpeg/2026/09/fnNCyHOc_400x400-2.jpg" type="image/jpeg"> 67 <link rel="canonical" href="https://paul.reviews/tag/security/"> 68 <meta name="referrer" content="no-referrer-when-downgrade"> 69 <link rel="next" href="https://paul.reviews/tag/security/page/2/"> 70 71 <meta property="og:site_name" content="Paul Moore: Information Security Consultant & Researcher"> 72 <meta property="og:type" content="website"> 73 <meta property="og:title" content="security - Paul Moore: Information Security Consultant & Researcher"> 74 <meta property="og:url" content="https://paul.reviews/tag/security/"> 75 <meta property="og:image" content="https://paul.reviews/content/images/size/w1200/2019/10/20190524_001312.jpg"> 76 <meta name="twitter:card" content="summary_large_image"> 77 <meta name="twitter:title" content="security - Paul Moore: Information Security Consultant & Researcher"> 78 <meta name="twitter:url" content="https://paul.reviews/tag/security/"> 79 <meta name="twitter:image" content="https://paul.reviews/content/images/size/w1200/2019/10/20190524_001312.jpg"> 80 <meta name="twitter:site" content="@paul_reviews"> 81 <meta property="og:image:width" content="1200"> 82 <meta property="og:image:height" content="625"> 83 84
84<script type="application/ld+json"> 85{ 86 "@context": "https://schema.org", 87 "@type": "Series", 88 "publisher": { 89 "@type": "Organization", 90 "name": "Paul Moore: Information Security Consultant & Researcher", 91 "url": "https://paul.reviews/", 92 "logo": { 93 "@type": "ImageObject", 94 "url": "https://paul.reviews/content/images/2026/09/ChatGPT-Image-Sep-15--2026--06_47_01-PM.png", 95 "width": 60, 96 "height": 60 97 } 98 }, 99 "url": "https://paul.reviews/tag/security/", 100 "name": "security", 101 "mainEntityOfPage": "https://paul.reviews/tag/security/" 102} 103 </script>
103 104 105 <meta name="generator" content="Ghost 6.63"> 106 <link rel="alternate" type="application/rss+xml" title="Paul Moore: Information Security Consultant & Researcher" href="https://paul.reviews/rss/"> 107 108
108<script defer src="https://cdn.jsdelivr.net/ghost/sodo-search@~1.8/umd/sodo-search.min.js" data-key="be77b651957bed6ea3b23475cc" data-styles="https://cdn.jsdelivr.net/ghost/sodo-search@~1.8/umd/main.css" data-sodo-search="https://paul.reviews/" data-locale="en" crossorigin="anonymous"></script>
108 109 110 <link href="https://paul.reviews/webmentions/receive/" rel="webmention"> 111
111<script defer src="/public/cards.min.js?v=ShRHxgy4po8zN-Wf"></script>
111<style>:root {--ghost-accent-color: #d70947;}</style> 112 <link rel="stylesheet" type="text/css" href="/public/cards.min.css?v=WwnU9jw5ancNC8Gc"> 113 <style> 114.author, 115.author-card, 116.author-box, 117.author-profile { 118 display: none !important; 119} 120</style> 121 </head> 122 <body class="tag-template tag-security"> 123 124<div class="w-screen"> 125 126<div 127 data-nav-close 128 class=" 129 fixed inset-0 bg-black/20 backdrop-blur-xs z-10 opacity-0 pointer-events-none transition-opacity duration-250 130 131 xl:hidden max-xl:[body[data-nav-open='true']_&]:opacity-100 max-xl:[body[data-nav-open='true']_&]:pointer-events-auto 132 " 133> 134</div> 135 136<aside 137 class=" 138 site-sidebar 139 140 fixed top-0 h-screen bg-page border-r border-stroke w-(--site-sidebar-width) z-20 transition-transform duration-250 141 142 max-xl:-translate-x-full max-xl:[body[data-nav-open='true']_&]:translate-x-0 143 " 144> 145 <div class="flex flex-col pt-6 pb-16 px-8 max-h-full min-h-screen no-scrollbar overflow-y-auto"> 146 <div class="flex items-center justify-between mb-8"> 147 148<a href="https://paul.reviews" class="site-logo " style="" aria-label="Paul Moore: Information Security Consultant & Researcher - Home"> 149 <img src="/content/images/2026/09/ChatGPT-Image-Sep-15--2026--06_47_01-PM.png" alt="Paul Moore: Information Security Consultant & Researcher" loading="eager" class="logo"/> 150</a> 151 </div> 152 153 <p class="max-md:hidden text-sm text-content-muted mb-8">Paul Moore: Information Security Consultant & Researcher</p> 154 155 <div class="flex items-center relative w-full mb-8 z-10 xl:hidden" data-ghost-search> 156 <span data-icon="search" class="absolute left-3 top-1/2 -translate-y-1/2 z-1 text-content-alt text-sm"></span> 157 <input type="text" placeholder='Search...' class="w-full input pl-9 shadow-2xs"> 158 <span class="absolute right-3 top-1/2 -translate-y-1/2 z-1 text-content-muted text-xs opacity-80" data-search-hint>âK</span> 159 </div> 160 161 <menu-nav 162 class="flex flex-1" 163 values-path="themeConfig.site.primaryNavigation" 164 orientation="vertical" 165 nav-class="text-sm" 166 item-class="group w-full flex items-center py-1.5 pr-3 h-8 aria-[current=page]:font-bold aria-[current=page]:text-accent" 167 group-class="flex flex-col whitespace-nowrap flex-wrap h-fit w-full not-first:mt-8" 168 group-header-class="font-medium text-content-alt mb-2 h-5" 169 group-item-class="group w-full flex items-center py-1.5 pl-4 pr-3 h-8 border-l border-stroke/70 aria-[current=page]:font-bold aria-[current=page]:border-l-accent hover:border-l-content/50 aria-[current=page]:text-accent" 170 icon-class="w-4 h-4 line-height-1 mr-3 opacity-70 group-aria-[current=page]:opacity-100 group-hover:opacity-95 transition-opacity duration-250" 171 aria-label="Primary Navigation" 172 ></menu-nav> 173 174 <social-icons class="xl:hidden mt-16 text-sm opacity-90 hover:opacity-100 transition-opacity duration-250" aria-label="Mobile Social Media Links"></social-icons> 175 176 </div> 177 178 <div class="sticky max-xl:hidden bottom-0 py-4 px-8 border-t bg-page/80 backdrop-blur-xs w-full"> 179 <social-icons class="text-sm opacity-90 hover:opacity-100 transition-opacity duration-250" aria-label="Desktop Social Media Links"></social-icons> 180 </div> 181</aside> 182 <div class="site-content w-full xl:pl-(--site-sidebar-width)"> 183 184 <header class="container relative z-1 items-center justify-between !py-6 hidden xl:flex"> 185 <div class="flex items-center relative w-76" data-ghost-search> 186 <span data-icon="search" class="absolute left-3 top-1/2 -translate-y-1/2 z-1 text-content-alt text-sm"></span> 187 <input type="text" placeholder='Search...' class="w-full input pl-9 shadow-2xs"> 188 <span class="absolute right-3 top-1/2 -translate-y-1/2 z-1 text-content-muted text-xs opacity-90" data-search-hint>âK</span> 189 </div> 190 191 192 </header> 193 194 <header class="container relative z-1 flex items-center justify-between !py-6 xl:hidden" data-color-scheme=""> 195 196<a href="https://paul.reviews" class="site-logo " style="" aria-label="Paul Moore: Information Security Consultant & Researcher - Home"> 197 <img src="/content/images/2026/09/ChatGPT-Image-Sep-15--2026--06_47_01-PM.png" alt="Paul Moore: Information Security Consultant & Researcher" loading="eager" class="logo"/> 198</a> 199 <div role="button" tabindex="0" aria-label="Open navigation menu" class="group flex items-center justify-center w-9 h-9 text-content-alt" data-nav-toggle>
200 <span data-icon="menu_search" class="text-2xl group-hover:scale-105 transition-transform ease-out-quad duration-400 text-content-alt"></span> 201 </div> 202 </header> 203 204 <main id="site-main" role="main" class="container !mt-3"> 205 206 207 208 <section class="flex flex-col md:flex-row items-center gap-6 md:gap-10 py-6 mb-4"> 209 210 <div class="relative flex flex-col gap-4"> 211 <h1 class="text-center md:text-left">security</h1> 212 </div> 213 </section> 214 215 216<hr class="mb-6 sm:mb-8"/> 217 218 219<div data-posts class="grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-3 gap-6 sm:gap-8 "> 220 221<article 222 223 data-post-id="6aa9886018405a8ea1adc1d9" 224 style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 0)" 225 class=" 226 post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)] 227 before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100 228 229 230 "> 231 232 233 <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover "> 234 <img 235 alt="HarmBlock+ World's Safest Smartphone: Please Rotate Responsibly." 236 class="group-hover:scale-102 transition-all duration-230 ease-out-quad" 237 loading="lazy" 238 src="/content/images/size/w600/2026/09/banner2.png" 239 srcset="/content/images/2026/09/banner2.png 320w, 240 /content/images/size/w600/2026/09/banner2.png 600w, 241 /content/images/size/w960/2026/09/banner2.png 960w, 242 /content/images/size/w1200/2026/09/banner2.png 1200w, 243 /content/images/size/w2000/2026/09/banner2.png 2000w" 244 > 245 <a href="https://paul.reviews/harmblock-worlds-safest-smartphone-please-rotate-responsibly/" class="absolute inset-0 z-10" aria-label="Read: HarmBlock+ World's Safest Smartphone: Please Rotate Responsibly."></a> 246 </figure> 247 248 <a href="/harmblock-worlds-safest-smartphone-please-rotate-responsibly/" class="absolute inset-0 z-0" aria-label="Read: HarmBlock+ World's Safest Smartphone: Please Rotate Responsibly."></a> 249 250 <div class="post-card-content flex flex-col "> 251 252 <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7 253 -mt-9 mb-5 mx-3 relative z-10 254 "> 255 256 257 </div> 258 259 <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 "> 260 <a href="/harmblock-worlds-safest-smartphone-please-rotate-responsibly/">HarmBlock+ World's Safest Smartphone: Please Rotate Responsibly.</a> 261 </h2> 262 263 <a href="/harmblock-worlds-safest-smartphone-please-rotate-responsibly/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 "> 264 ** NSFW Warning ** 265 266Back in July 2025, the Online Safety Act was a hot topic. Many sites were frantically adding age verification under threat of criminal prosecution, if they failed to protect children from online harm. 267 268The law, technology and implementations were... flawed; I presented an AI-generated video of the-then Technology Secretary, Peter Kyle, in order to skip intrusive censorship. That turned out to be unnecessary, as a smiley face drawn on a thumb also bypassed the "robust" verific 269 </a> 270 271 <footer class="flex items-center gap-1.5 mt-2 text-xs "> 272 <div class="post-card-author flex items-center gap-2"> 273 <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover"> 274 <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a> 275 </div> 276 <span class="text-[0.75em] opacity-65">â¢</span> 277 <time class="opacity-80" datetime="2026-09-22"> 278 <span>3 days ago</span> 279 <span class="hidden">Sep 22, 2026</span> 280 </time> 281 </footer> 282 </div> 283</article> 284 285<article 286 287 data-post-id="6aa9420c9a33388bd4fe6375" 288 style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 1)" 289 class=" 290 post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)] 291 before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100 292 293 294 "> 295 296 297 <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover "> 298 <img 299 alt="Police CyberAlarm: Abysmal security, yet again." 300 class="group-hover:scale-102 transition-all duration-230 ease-out-quad" 301 loading="lazy" 302 src="/content/images/size/w600/2022/04/small-4.png" 303 srcset="/content/images/2022/04/small-4.png 320w, 304 /content/images/size/w600/2022/04/small-4.png 600w, 305 /content/images/size/w960/2022/04/small-4.png 960w, 306 /content/images/size/w1200/2022/04/small-4.png 1200w, 307 /content/images/size/w2000/2022/04/small-4.png 2000w" 308 > 309 <a href="https://paul.reviews/police-cyberalarm-abysmal-security-yet-again/" class="absolute inset-0 z-10" aria-label="Read: Police CyberAlarm: Abysmal security, yet again."></a> 310 </figure> 311 312 <a href="/police-cyberalarm-abysmal-security-yet-again/" class="absolute inset-0 z-0" aria-label="Read: Police CyberAlarm: Abysmal security, yet again."></a> 313 314 <div class="post-card-content flex flex-col "> 315 316 <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7 317 -mt-9 mb-5 mx-3 relative z-10 318 "> 319 320 <a href="https://paul.reviews/tag/security/" class="post-card__tag flex items-center w-fit roun
320ded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300 321 bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100 322 "> 323 security 324 </a> 325 326 </div> 327 328 <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 "> 329 <a href="/police-cyberalarm-abysmal-security-yet-again/">Police CyberAlarm: Abysmal security, yet again.</a> 330 </h2> 331 332 <a href="/police-cyberalarm-abysmal-security-yet-again/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 "> 333 3 attempts, 3 complete failures. Incredibly, cyberAlarm is now even worse than before. 334 </a> 335 336 <footer class="flex items-center gap-1.5 mt-2 text-xs "> 337 <div class="post-card-author flex items-center gap-2"> 338 <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover"> 339 <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a> 340 </div> 341 <span class="text-[0.75em] opacity-65">â¢</span> 342 <time class="opacity-80" datetime="2022-04-19"> 343 <span>4 years ago</span> 344 <span class="hidden">Apr 19, 2022</span> 345 </time> 346 </footer> 347 </div> 348</article> 349 350<article 351 352 data-post-id="6aa9420c9a33388bd4fe6374" 353 style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 2)" 354 class=" 355 post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)] 356 before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100 357 358 359 "> 360 361 362 <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover "> 363 <img 364 alt="TOFU Attack: Your registration flow is a breach waiting to happen..." 365 class="group-hover:scale-102 transition-all duration-230 ease-out-quad" 366 loading="lazy" 367 src="/content/images/size/w600/2026/09/header_image-1.jpg" 368 srcset="/content/images/2026/09/header_image-1.jpg 320w, 369 /content/images/size/w600/2026/09/header_image-1.jpg 600w, 370 /content/images/size/w960/2026/09/header_image-1.jpg 960w, 371 /content/images/size/w1200/2026/09/header_image-1.jpg 1200w, 372 /content/images/size/w2000/2026/09/header_image-1.jpg 2000w" 373 > 374 <a href="https://paul.reviews/tofu-attack-your-registration-flow-is-a-breach-waiting-to-happen/" class="absolute inset-0 z-10" aria-label="Read: TOFU Attack: Your registration flow is a breach waiting to happen..."></a> 375 </figure> 376 377 <a href="/tofu-attack-your-registration-flow-is-a-breach-waiting-to-happen/" class="absolute inset-0 z-0" aria-label="Read: TOFU Attack: Your registration flow is a breach waiting to happen..."></a> 378 379 <div class="post-card-content flex flex-col "> 380 381 <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7 382 -mt-9 mb-5 mx-3 relative z-10 383 "> 384 385 <a href="https://paul.reviews/tag/data/" class="post-card__tag flex items-center w-fit rounded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300 386 bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100 387 "> 388 data 389 </a> 390 391 </div> 392 393 <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 "> 394 <a href="/tofu-attack-your-registration-flow-is-a-breach-waiting-to-happen/">TOFU Attack: Your registration flow is a breach waiting to happen...</a> 395 </h2> 396 397 <a href="/tofu-attack-your-registration-flow-is-a-breach-waiting-to-happen/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 "> 398 The risks of failing to validate an email address... 399 </a> 400 401 <footer class="flex items-center gap-1.5 mt-2 text-xs "> 402 <div class="post-card-author flex items-center gap-2"> 403 <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover"> 404 <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a> 405 </div>
406 <span class="text-[0.75em] opacity-65">â¢</span> 407 <time class="opacity-80" datetime="2021-03-12"> 408 <span>6 years ago</span> 409 <span class="hidden">Mar 12, 2021</span> 410 </time> 411 </footer> 412 </div> 413</article> 414 415<article 416 417 data-post-id="6aa9420c9a33388bd4fe6373" 418 style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 3)" 419 class=" 420 post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)] 421 before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100 422 423 424 "> 425 426 427 <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover "> 428 <img 429 alt="CyberAlarm: Testing the "production version"... and why you should avoid it." 430 class="group-hover:scale-102 transition-all duration-230 ease-out-quad" 431 loading="lazy" 432 src="/content/images/size/w600/2020/11/cyber-alarm-3.png" 433 srcset="/content/images/2020/11/cyber-alarm-3.png 320w, 434 /content/images/size/w600/2020/11/cyber-alarm-3.png 600w, 435 /content/images/size/w960/2020/11/cyber-alarm-3.png 960w, 436 /content/images/size/w1200/2020/11/cyber-alarm-3.png 1200w, 437 /content/images/size/w2000/2020/11/cyber-alarm-3.png 2000w" 438 > 439 <a href="https://paul.reviews/cyberalarm-testing-the-production-version-and-why-you-should-avoid-it/" class="absolute inset-0 z-10" aria-label="Read: CyberAlarm: Testing the "production version"... and why you should avoid it."></a> 440 </figure> 441 442 <a href="/cyberalarm-testing-the-production-version-and-why-you-should-avoid-it/" class="absolute inset-0 z-0" aria-label="Read: CyberAlarm: Testing the "production version"... and why you should avoid it."></a> 443 444 <div class="post-card-content flex flex-col "> 445 446 <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7 447 -mt-9 mb-5 mx-3 relative z-10 448 "> 449 450 <a href="https://paul.reviews/tag/cyberalarm/" class="post-card__tag flex items-center w-fit rounded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300 451 bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100 452 "> 453 cyberalarm 454 </a> 455 456 </div> 457 458 <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 "> 459 <a href="/cyberalarm-testing-the-production-version-and-why-you-should-avoid-it/">CyberAlarm: Testing the "production version"... and why you should avoid it.</a> 460 </h2> 461 462 <a href="/cyberalarm-testing-the-production-version-and-why-you-should-avoid-it/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 "> 463 Reviewing the "production" build of CyberAlarm. Good grief - you couldn't make it up. 464 </a> 465 466 <footer class="flex items-center gap-1.5 mt-2 text-xs "> 467 <div class="post-card-author flex items-center gap-2"> 468 <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover"> 469 <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a> 470 </div> 471 <span class="text-[0.75em] opacity-65">â¢</span> 472 <time class="opacity-80" datetime="2020-12-02"> 473 <span>6 years ago</span> 474 <span class="hidden">Dec 02, 2020</span> 475 </time> 476 </footer> 477 </div> 478</article> 479 480<article 481 482 data-post-id="6aa9420c9a33388bd4fe6372" 483 style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 4)" 484 class=" 485 post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)] 486 before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100 487 p-6 bg-page-alt rounded-card justify-center hover:bg-transparent transition-all duration-240 ease-out-quad 488 489 "> 490 491 492 <a href="/cyberalarm-an-independent-security-review-and-why-you-should-avoid-it/" class="absolute inset-0 z-0" aria-label="Read: CyberAlarm: An independent security review... and why you should avoid it."></a> 493 494 <div class="post-card-content flex flex-col "> 495 496 <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7 497 498 "> 499 500 <a href="https://paul.reviews/tag/cyberalarm/" class="post-card__tag flex items-center w-fit roun
500ded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300 501 bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100 502 "> 503 cyberalarm 504 </a> 505 506 </div> 507 508 <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 "> 509 <a href="/cyberalarm-an-independent-security-review-and-why-you-should-avoid-it/">CyberAlarm: An independent security review... and why you should avoid it.</a> 510 </h2> 511 512 <a href="/cyberalarm-an-independent-security-review-and-why-you-should-avoid-it/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 "> 513 A brief review of CyberAlarm uncovers several serious concerns. Please read this before you deploy it. 514 </a> 515 516 <footer class="flex items-center gap-1.5 mt-2 text-xs "> 517 <div class="post-card-author flex items-center gap-2"> 518 <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover"> 519 <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a> 520 </div> 521 <span class="text-[0.75em] opacity-65">â¢</span> 522 <time class="opacity-80" datetime="2020-11-24"> 523 <span>6 years ago</span> 524 <span class="hidden">Nov 24, 2020</span> 525 </time> 526 </footer> 527 </div> 528</article> 529 530<article 531 532 data-post-id="6aa9420c9a33388bd4fe6370" 533 style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 5)" 534 class=" 535 post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)] 536 before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100 537 538 539 "> 540 541 542 <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover "> 543 <img 544 alt="SafeBuy: Can you trust a trustmark?" 545 class="group-hover:scale-102 transition-all duration-230 ease-out-quad" 546 loading="lazy" 547 src="/content/images/size/w600/2017/10/SBY0010a-SafebuyConsumerCarelogo.jpg" 548 srcset="/content/images/2017/10/SBY0010a-SafebuyConsumerCarelogo.jpg 320w, 549 /content/images/size/w600/2017/10/SBY0010a-SafebuyConsumerCarelogo.jpg 600w, 550 /content/images/size/w960/2017/10/SBY0010a-SafebuyConsumerCarelogo.jpg 960w, 551 /content/images/size/w1200/2017/10/SBY0010a-SafebuyConsumerCarelogo.jpg 1200w, 552 /content/images/size/w2000/2017/10/SBY0010a-SafebuyConsumerCarelogo.jpg 2000w" 553 > 554 <a href="https://paul.reviews/safebuy-can-you-trust-a-trustmark/" class="absolute inset-0 z-10" aria-label="Read: SafeBuy: Can you trust a trustmark?"></a> 555 </figure> 556 557 <a href="/safebuy-can-you-trust-a-trustmark/" class="absolute inset-0 z-0" aria-label="Read: SafeBuy: Can you trust a trustmark?"></a> 558 559 <div class="post-card-content flex flex-col "> 560 561 <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7 562 -mt-9 mb-5 mx-3 relative z-10 563 "> 564 565 <a href="https://paul.reviews/tag/xss/" class="post-card__tag flex items-center w-fit rounded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300 566 bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100 567 "> 568 xss 569 </a> 570 571 </div> 572 573 <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 "> 574 <a href="/safebuy-can-you-trust-a-trustmark/">SafeBuy: Can you trust a trustmark?</a> 575 </h2> 576 577 <a href="/safebuy-can-you-trust-a-trustmark/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 "> 578 Private, secure & trusted... or is it? 579 </a> 580 581 <footer class="flex items-center gap-1.5 mt-2 text-xs "> 582 <div class="post-card-author flex items-center gap-2"> 583 <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover"> 584 <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a> 585 </div>
586 <span class="text-[0.75em] opacity-65">â¢</span> 587 <time class="opacity-80" datetime="2017-10-06"> 588 <span>9 years ago</span> 589 <span class="hidden">Oct 06, 2017</span> 590 </time> 591 </footer> 592 </div> 593</article> 594 595<article 596 597 data-post-id="6aa9420c9a33388bd4fe636f" 598 style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 6)" 599 class=" 600 post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)] 601 before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100 602 603 604 "> 605 606 607 <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover "> 608 <img 609 alt="Kervball: The Kerv ring data breach..." 610 class="group-hover:scale-102 transition-all duration-230 ease-out-quad" 611 loading="lazy" 612 src="/content/images/size/w600/2017/06/kerv.jpg" 613 srcset="/content/images/2017/06/kerv.jpg 320w, 614 /content/images/size/w600/2017/06/kerv.jpg 600w, 615 /content/images/size/w960/2017/06/kerv.jpg 960w, 616 /content/images/size/w1200/2017/06/kerv.jpg 1200w, 617 /content/images/size/w2000/2017/06/kerv.jpg 2000w" 618 > 619 <a href="https://paul.reviews/kervball-the-kerv-ring-data-breach/" class="absolute inset-0 z-10" aria-label="Read: Kervball: The Kerv ring data breach..."></a> 620 </figure> 621 622 <a href="/kervball-the-kerv-ring-data-breach/" class="absolute inset-0 z-0" aria-label="Read: Kervball: The Kerv ring data breach..."></a> 623 624 <div class="post-card-content flex flex-col "> 625 626 <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7 627 -mt-9 mb-5 mx-3 relative z-10 628 "> 629 630 <a href="https://paul.reviews/tag/security/" class="post-card__tag flex items-center w-fit rounded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300 631 bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100 632 "> 633 security 634 </a> 635 636 </div> 637 638 <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 "> 639 <a href="/kervball-the-kerv-ring-data-breach/">Kervball: The Kerv ring data breach...</a> 640 </h2> 641 642 <a href="/kervball-the-kerv-ring-data-breach/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 "> 643 Here's what happened the day my Kerv arrived... 644 </a> 645 646 <footer class="flex items-center gap-1.5 mt-2 text-xs "> 647 <div class="post-card-author flex items-center gap-2"> 648 <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover"> 649 <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a> 650 </div> 651 <span class="text-[0.75em] opacity-65">â¢</span> 652 <time class="opacity-80" datetime="2017-06-23"> 653 <span>9 years ago</span> 654 <span class="hidden">Jun 23, 2017</span> 655 </time> 656 </footer> 657 </div> 658</article> 659 660<article 661 662 data-post-id="6aa9420c9a33388bd4fe636e" 663 style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 7)" 664 class=" 665 post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)] 666 before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100 667 668 669 "> 670 671 672 <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover "> 673 <img 674 alt="Don't let them paste passwords..." 675 class="group-hover:scale-102 transition-all duration-230 ease-out-quad" 676 loading="lazy" 677 src="/content/images/size/w600/2017/02/header-3.png" 678 srcset="/content/images/2017/02/header-3.png 320w, 679 /content/images/size/w600/2017/02/header-3.png 600w, 680 /content/images/size/w960/2017/02/header-3.png 960w, 681 /content/images/size/w1200/2017/02/header-3.png 1200w, 682 /content/images/size/w2000/2017/02/header-3.png 2000w" 683 > 684 <a href="https://paul.reviews/dont-let-them-paste-passwords/" class="absolute inset-0 z-10" aria-label="Read: Don't let them paste passwords..."></a> 685 </figure> 686 687 <a href="/dont-let-them-paste-passwords/" class="absolute inset-0 z-0" aria-label="Read: Don't let them paste passwords..."></a> 688 689 <div class="post-card-content flex flex-col "> 690 691 <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7 692 -mt-9 mb-5 mx-3 relative z-10 693 "> 694 695 <a href="https://paul.reviews/tag/2fa/" class="post-card__tag flex items-center w-fit roun
695ded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300 696 bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100 697 "> 698 2fa 699 </a> 700 701 </div> 702 703 <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 "> 704 <a href="/dont-let-them-paste-passwords/">Don't let them paste passwords...</a> 705 </h2> 706 707 <a href="/dont-let-them-paste-passwords/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 "> 708 After months of tweets, emails & articles from eminent figures like Troy Hunt & the NCSC, it's about time I weighed in on the debate surrounding sites which disable a user's ability to paste passwords. 709 710 711The general consensus amongst many experts, including those mentioned above, is that disabling paste on password fields reduces security; the NCSC went one step further, calling it "completely pointless" and "damaging". 712 713 714So without further ado, allow me to explain why I believe disabling pas 715 </a> 716 717 <footer class="flex items-center gap-1.5 mt-2 text-xs "> 718 <div class="post-card-author flex items-center gap-2"> 719 <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover"> 720 <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a> 721 </div> 722 <span class="text-[0.75em] opacity-65">â¢</span> 723 <time class="opacity-80" datetime="2017-02-18"> 724 <span>10 years ago</span> 725 <span class="hidden">Feb 18, 2017</span> 726 </time> 727 </footer> 728 </div> 729</article> 730 731<article 732 733 data-post-id="6aa9420c9a33388bd4fe636c" 734 style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 8)" 735 class=" 736 post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)] 737 before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100 738 739 740 "> 741 742 743 <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover "> 744 <img 745 alt="Bank & Mobile Network Security: For want of a nail..." 746 class="group-hover:scale-102 transition-all duration-230 ease-out-quad" 747 loading="lazy" 748 src="/content/images/size/w600/2016/05/Bank-Credit-Unions-Security-Services-NYC.jpg" 749 srcset="/content/images/2016/05/Bank-Credit-Unions-Security-Services-NYC.jpg 320w, 750 /content/images/size/w600/2016/05/Bank-Credit-Unions-Security-Services-NYC.jpg 600w, 751 /content/images/size/w960/2016/05/Bank-Credit-Unions-Security-Services-NYC.jpg 960w, 752 /content/images/size/w1200/2016/05/Bank-Credit-Unions-Security-Services-NYC.jpg 1200w, 753 /content/images/size/w2000/2016/05/Bank-Credit-Unions-Security-Services-NYC.jpg 2000w" 754 > 755 <a href="https://paul.reviews/bank-mobile-network-security-for-want-of-a-nail/" class="absolute inset-0 z-10" aria-label="Read: Bank & Mobile Network Security: For want of a nail..."></a> 756 </figure> 757 758 <a href="/bank-mobile-network-security-for-want-of-a-nail/" class="absolute inset-0 z-0" aria-label="Read: Bank & Mobile Network Security: For want of a nail..."></a> 759 760 <div class="post-card-content flex flex-col "> 761 762 <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7 763 -mt-9 mb-5 mx-3 relative z-10 764 "> 765 766 <a href="https://paul.reviews/tag/banking/" class="post-card__tag flex items-center w-fit rounded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300 767 bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100 768 "> 769 banking 770 </a> 771 772 </div> 773 774 <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 "> 775 <a href="/bank-mobile-network-security-for-want-of-a-nail/">Bank & Mobile Network Security: For want of a nail...</a> 776 </h2> 777 778 <a href="/bank-mobile-network-security-for-want-of-a-nail/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 "> 779 Ever since publishing a "two factor authentication vs two step verification" article in 2014, I've been waiting for an opportunity to irrefutably demonstrate the difference. 780 781 782Note: 783 784This article is very much a "work in progress" as until both exploits are patched, I can't provide any technical information. 785 786 787 788A quick recap... 789 790 791If you haven't yet read the above article, let's quickly recap on the differences between two-factor authentication & two-step verification. 792 793 794A "factor" falls into o 795 </a> 796 797 <footer class="flex items-center gap-1.5 mt-2 text-xs "> 798 <div class="post-card-author flex items-center gap-2"> 799 <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover"> 800 <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a> 801 </div>
802 <span class="text-[0.75em] opacity-65">â¢</span> 803 <time class="opacity-80" datetime="2016-05-02"> 804 <span>10 years ago</span> 805 <span class="hidden">May 02, 2016</span> 806 </time> 807 </footer> 808 </div> 809</article> 810 811<article 812 813 data-post-id="6aa9420c9a33388bd4fe636b" 814 style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 9)" 815 class=" 816 post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)] 817 before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100 818 819 820 "> 821 822 823 <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover "> 824 <img 825 alt="EveryKey Revisited: Military grade? Give me a break." 826 class="group-hover:scale-102 transition-all duration-230 ease-out-quad" 827 loading="lazy" 828 src="/content/images/size/w600/2016/04/Everykey-Never-Forget-a-Password-or-Key-Again-01.jpg" 829 srcset="/content/images/2016/04/Everykey-Never-Forget-a-Password-or-Key-Again-01.jpg 320w, 830 /content/images/size/w600/2016/04/Everykey-Never-Forget-a-Password-or-Key-Again-01.jpg 600w, 831 /content/images/size/w960/2016/04/Everykey-Never-Forget-a-Password-or-Key-Again-01.jpg 960w, 832 /content/images/size/w1200/2016/04/Everykey-Never-Forget-a-Password-or-Key-Again-01.jpg 1200w, 833 /content/images/size/w2000/2016/04/Everykey-Never-Forget-a-Password-or-Key-Again-01.jpg 2000w" 834 > 835 <a href="https://paul.reviews/everykey-revisited-military-grade-give-me-a-break/" class="absolute inset-0 z-10" aria-label="Read: EveryKey Revisited: Military grade? Give me a break."></a> 836 </figure> 837 838 <a href="/everykey-revisited-military-grade-give-me-a-break/" class="absolute inset-0 z-0" aria-label="Read: EveryKey Revisited: Military grade? Give me a break."></a> 839 840 <div class="post-card-content flex flex-col "> 841 842 <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7 843 -mt-9 mb-5 mx-3 relative z-10 844 "> 845 846 <a href="https://paul.reviews/tag/everykey/" class="post-card__tag flex items-center w-fit rounded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300 847 bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100 848 "> 849 everykey 850 </a> 851 852 </div> 853 854 <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 "> 855 <a href="/everykey-revisited-military-grade-give-me-a-break/">EveryKey Revisited: Military grade? Give me a break.</a> 856 </h2> 857 858 <a href="/everykey-revisited-military-grade-give-me-a-break/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 "> 859 Update 27/04/16: 860 861Here are some screenshots of the EveryKey Windows app. 862 863 864It's not digitally signed, so there's no way to ensure it's genuine and hasn't been modified, it crashes if you click the toolbar & if you click "forgot password", it opens Google. To be frank, it looks pretty thrown together at the moment. 865 866 867Thank you for the anonymous tip folks. 868 869 870Update 12/04/16: 871 872EveryKey have replied to this post. Read it here. 873 874 875 876In May 2015, I questioned if EveryKey, one of Kickstarter's most succe 877 </a> 878 879 <footer class="flex items-center gap-1.5 mt-2 text-xs "> 880 <div class="post-card-author flex items-center gap-2"> 881 <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover"> 882 <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a> 883 </div> 884 <span class="text-[0.75em] opacity-65">â¢</span> 885 <time class="opacity-80" datetime="2016-04-08">
886 <span>10 years ago</span> 887 <span class="hidden">Apr 08, 2016</span> 888 </time> 889 </footer> 890 </div> 891</article> 892 893<article 894 895 data-post-id="6aa9420c9a33388bd4fe636a" 896 style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 10)" 897 class=" 898 post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)] 899 before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100 900 901 902 "> 903 904 905 <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover "> 906 <img 907 alt="PwnPhone: Default passwords allow covert surveillance." 908 class="group-hover:scale-102 transition-all duration-230 ease-out-quad" 909 loading="lazy" 910 src="/content/images/size/w600/2016/02/header1-2.gif" 911 srcset="/content/images/2016/02/header1-2.gif 320w, 912 /content/images/size/w600/2016/02/header1-2.gif 600w, 913 /content/images/size/w960/2016/02/header1-2.gif 960w, 914 /content/images/size/w1200/2016/02/header1-2.gif 1200w, 915 /content/images/size/w2000/2016/02/header1-2.gif 2000w" 916 > 917 <a href="https://paul.reviews/pwnphone-default-passwords-allow-covert-surveillance/" class="absolute inset-0 z-10" aria-label="Read: PwnPhone: Default passwords allow covert surveillance."></a> 918 </figure> 919 920 <a href="/pwnphone-default-passwords-allow-covert-surveillance/" class="absolute inset-0 z-0" aria-label="Read: PwnPhone: Default passwords allow covert surveillance."></a> 921 922 <div class="post-card-content flex flex-col "> 923 924 <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7 925 -mt-9 mb-5 mx-3 relative z-10 926 "> 927 928 <a href="https://paul.reviews/tag/snom/" class="post-card__tag flex items-center w-fit rounded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300 929 bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100 930 "> 931 snom 932 </a> 933 934 </div> 935 936 <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 "> 937 <a href="/pwnphone-default-passwords-allow-covert-surveillance/">PwnPhone: Default passwords allow covert surveillance.</a> 938 </h2> 939 940 <a href="/pwnphone-default-passwords-allow-covert-surveillance/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 "> 941 A few weeks ago, I was asked to observe an installation of several wireless access points & VoIP phones, with a view to making recommendations on how best to improve security while maintaining ease of deployment. 942 943 944It didn't take long for several trends to appear; chief amongst which was the use of 945 946 947 948 949 950We'll just use defaults, for now. That password will do, for now. 951 952 953 954Of course, as soon as the device burst into life, it's on to the next one. At which point, "now" becomes a distant memory, alo 955 </a> 956 957 <footer class="flex items-center gap-1.5 mt-2 text-xs "> 958 <div class="post-card-author flex items-center gap-2"> 959 <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover"> 960 <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a> 961 </div> 962 <span class="text-[0.75em] opacity-65">â¢</span> 963 <time class="opacity-80" datetime="2016-02-13"> 964 <span>11 years ago</span> 965 <span class="hidden">Feb 13, 2016</span> 966 </time> 967 </footer> 968 </div> 969</article> 970 971<article 972 973 data-post-id="6aa9420c9a33388bd4fe6369" 974 style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 11)" 975 class=" 976 post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)] 977 before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100 978 979 980 "> 981 982 983 <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover "> 984 <img 985 alt="Identity theft & payment fraud? That's ASDA price." 986 class="group-hover:scale-102 transition-all duration-230 ease-out-quad" 987 loading="lazy" 988 src="/content/images/size/w600/2016/01/Asda_slogan.png" 989 srcset="/content/images/2016/01/Asda_slogan.png 320w, 990 /content/images/size/w600/2016/01/Asda_slogan.png 600w, 991 /content/images/size/w960/2016/01/Asda_slogan.png 960w, 992 /content/images/size/w1200/2016/01/Asda_slogan.png 1200w, 993 /content/images/size/w2000/2016/01/Asda_slogan.png 2000w" 994 > 995 <a href="https://paul.reviews/identity-theft-payment-fraud-thats-asda-price/" class="absolute inset-0 z-10" aria-label="Read: Identity theft & payment fraud? That's ASDA price."></a> 996 </figure> 997 998 <a href="/identity-theft-payment-fraud-thats-asda-price/" class="absolute inset-0 z-0" aria-label="Read: Identity theft & payment fraud? That's ASDA price."></a> 999 1000 <div class="post-card-content flex flex-col "> 1001 1002 <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7 1003 -mt-9 mb-5 mx-3 relative z-10 1004 "> 1005 1006 <a href="https://paul.reviews/tag/csrf/" class="post-card__tag flex items-center w-fit roun
1006ded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300 1007 bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100 1008 "> 1009 csrf 1010 </a> 1011 1012 </div> 1013 1014 <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 "> 1015 <a href="/identity-theft-payment-fraud-thats-asda-price/">Identity theft & payment fraud? That's ASDA price.</a> 1016 </h2> 1017 1018 <a href="/identity-theft-payment-fraud-thats-asda-price/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 "> 1019 Back in March 2014, I contacted ASDA to report several security vulnerabilities and despite a fix promised "in the next few weeks", little appears to have changed. 1020 1021 1022@Stuho1mez All of our sites are secure, I would advise using Chrome. Thanks, Beth 1023 1024â Asda Service Team (@AsdaServiceTeam) January 14, 2016 1025 1026 1027 1028After 677 days and several tweets along a similar vein, my patience has finally run out. 1029 1030 1031 1032What's the problem? 1033 1034 1035Two of the simplest and most prevalent exploits allow an attacker to quickly & 1036 </a> 1037 1038 <footer class="flex items-center gap-1.5 mt-2 text-xs "> 1039 <div class="post-card-author flex items-center gap-2"> 1040 <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover"> 1041 <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a> 1042 </div> 1043 <span class="text-[0.75em] opacity-65">â¢</span> 1044 <time class="opacity-80" datetime="2016-01-18"> 1045 <span>11 years ago</span> 1046 <span class="hidden">Jan 18, 2016</span> 1047 </time> 1048 </footer> 1049 </div> 1050</article> 1051</div> 1052 1053<div class="hidden"> 1054 1055<div 1056 class="flex flex-col justify-center gap-4 w-fit mx-auto " 1057 data-infinite="true" 1058> 1059 1060 <a href="/tag/security/page/2/" data-pagination-next hidden></a> 1061 1062 1063 <div data-pagination-status class="text-center text-muted hidden"> 1064 <div class="infinite-scroll-action"> 1065 <p class="infinite-scroll-request">Loading...</p> 1066 <p class="infinite-scroll-last !hidden">That's everything for now.</p> 1067 <p class="infinite-scroll-error">Error loading more articles. Please try again.</p> 1068 </div> 1069 </div> 1070</div> 1071 1072</div> 1073 </main> 1074 1075 1076<footer class="pt-6 pb-4 bg-page text-content-alt" data-footer> 1077 <div class="container"> 1078 <div class="flex justify-between items-center"> 1079 1080<a href="https://paul.reviews" class="site-logo flex-1" style="" aria-label="Paul Moore: Information Security Consultant & Researcher - Home"> 1081 <img src="/content/images/2026/09/ChatGPT-Image-Sep-15--2026--06_47_01-PM.png" alt="Paul Moore: Information Security Consultant & Researcher" loading="eager" class="logo"/> 1082</a> <social-icons class="flex items-center justify-end flex-1 text-sm opacity-90 hover:opacity-100 transition-opacity duration-250" aria-label="Footer Social Media Links"></social-icons> 1083 </div> 1084 1085 <div class="flex justify-between flex-wrap md:flex-nowrap w-full py-4 my-4 gap-8 border-b border-t border-b0"> 1086 <menu-nav 1087 class="w-full max-md:basis-full flex-1 shrink-0" 1088 values-path="themeConfig.site.secondaryNavigation" 1089 orientation="horizontal" 1090 nav-class="text-sm" 1091 item-class="hover:underline" 1092 group-class="flex flex-col gap-1" 1093 group-header-class="font-medium mb-1" 1094 group-item-class="hover:underline text-sm text-content opacity-90 hover:opacity-100 transition-opacity duration-250" 1095 show-external-icon="true" 1096 aria-label="Footer Navigation" 1097 ></menu-nav> 1098 </div> 1099 <div class="flex justify-center items-center h-5.5"> 1100 <p class="text-xs"> 1101 © 2026 Published with 1102 <a href="https://ghost.org" target="_blank" rel="noopener" class="underline">Ghost</a> 1103 </p> 1104 </div> 1105 </div> 1106</footer> </div> 1107</div> 1108 1109 1110 1111 1112
1112<script type="module" src="https://static.cloudflareinsights.com/beacon.min.js/v31edd6df95cf4e85bb4c19e7a9bdbcba1788362987495" integrity="sha512-iIg7k2xntmwu6/uSb5tpc/hySgZc4eoL31yB29W6tJFo2akwjPWcEqnCEdJvGexCL0KEQwVYv5BlowfhVz26hg==" data-cf-beacon='{"version":"2024.11.0","token":"03e8346f4b2d43c293c82f33938b432f","r":1,"spa":2}' crossorigin="anonymous"></script>
1112 1113</body> 1114</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.