PageSourceSearch

https://paul.reviews/tag/security/

html paul.reviews collected 2026-09-25 21:15:40 UTC 54,267 bytes, 1,114 lines download raw bytes

1
2<!DOCTYPE html>
3<html lang="en" data-color-scheme="light" dir="ltr">
4  <head>
5    <title>security - Paul Moore: Information Security Consultant &amp; Researcher</title>
6    <meta charset="utf-8">
7    <meta name="viewport" content="width=device-width, initial-scale=1.0">
8    <meta name="view-transition" content="same-origin"> 
9    
10    
11<link rel="preconnect" href="https://fonts.bunny.net" crossorigin>
12<link rel="stylesheet" href="https://fonts.bunny.net/css?family=inter:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i
13&display=swap">
14<link rel="stylesheet" href="https://fonts.bunny.net/css?family=fira-sans:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i
15&display=swap">
16
17
18<style>
19  :root {
20    --color-accent: #d70947;
21    --cover-image: url(https://paul.reviews/content/images/2019/10/20190524_001312.jpg);
22    --font-heading: var(--gh-font-heading, "Inter");
23    --font-body: var(--gh-font-body, "Fira Sans");
24    --post-card-image-aspect-ratio: 16/9;
25    --radius-card: 12px;
26  }
27</style>
28
29<script>
30  window.themeConfig = {
31    colorScheme: "light",
32    site: {
33      url: "https://paul.reviews",
34      title: "Paul Moore: Information Security Consultant &amp; Researcher",
35      description: "Paul Moore: Information Security Consultant &amp; Researcher",
36      accentColor: "#d70947",
37      icon: "https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400-2.jpg",
38      facebook: "",
39      twitter: "@paul_reviews",
40      primaryNavigation: [
41          {
42            label: "Home",
43            url: "https://paul.reviews"
44          },
45          {
46            label: "Twitter",
47            url: "https://twitter.com/paul_reviews"
48          },
49          {
50            label: "Email Me",
51            url: "mailto:[email protected]"
52          },
53      ],
54      secondaryNavigation: [
55      ]
56    }
57  }
58</script>
58
59
60
61    <link rel="stylesheet" type="text/css" href="/assets/build/style.css?v=cuOq2iyAg7cq-yFD">
62    <link rel="manifest" data-manifest />
63
64    
64<script type="module" src="/assets/build/main.js?v=Z7T24uSJU1BXpjis"></script>
64
65
66    <link rel="icon" href="https://paul.reviews/content/images/size/w256h256/format/jpeg/2026/09/fnNCyHOc_400x400-2.jpg" type="image/jpeg">
67    <link rel="canonical" href="https://paul.reviews/tag/security/">
68    <meta name="referrer" content="no-referrer-when-downgrade">
69    <link rel="next" href="https://paul.reviews/tag/security/page/2/">
70    
71    <meta property="og:site_name" content="Paul Moore: Information Security Consultant &amp; Researcher">
72    <meta property="og:type" content="website">
73    <meta property="og:title" content="security - Paul Moore: Information Security Consultant &amp; Researcher">
74    <meta property="og:url" content="https://paul.reviews/tag/security/">
75    <meta property="og:image" content="https://paul.reviews/content/images/size/w1200/2019/10/20190524_001312.jpg">
76    <meta name="twitter:card" content="summary_large_image">
77    <meta name="twitter:title" content="security - Paul Moore: Information Security Consultant &amp; Researcher">
78    <meta name="twitter:url" content="https://paul.reviews/tag/security/">
79    <meta name="twitter:image" content="https://paul.reviews/content/images/size/w1200/2019/10/20190524_001312.jpg">
80    <meta name="twitter:site" content="@paul_reviews">
81    <meta property="og:image:width" content="1200">
82    <meta property="og:image:height" content="625">
83    
84    
84<script type="application/ld+json">
85{
86    "@context": "https://schema.org",
87    "@type": "Series",
88    "publisher": {
89        "@type": "Organization",
90        "name": "Paul Moore: Information Security Consultant & Researcher",
91        "url": "https://paul.reviews/",
92        "logo": {
93            "@type": "ImageObject",
94            "url": "https://paul.reviews/content/images/2026/09/ChatGPT-Image-Sep-15--2026--06_47_01-PM.png",
95            "width": 60,
96            "height": 60
97        }
98    },
99    "url": "https://paul.reviews/tag/security/",
100    "name": "security",
101    "mainEntityOfPage": "https://paul.reviews/tag/security/"
102}
103    </script>
103
104
105    <meta name="generator" content="Ghost 6.63">
106    <link rel="alternate" type="application/rss+xml" title="Paul Moore: Information Security Consultant &amp; Researcher" href="https://paul.reviews/rss/">
107    
108    
108<script defer src="https://cdn.jsdelivr.net/ghost/sodo-search@~1.8/umd/sodo-search.min.js" data-key="be77b651957bed6ea3b23475cc" data-styles="https://cdn.jsdelivr.net/ghost/sodo-search@~1.8/umd/main.css" data-sodo-search="https://paul.reviews/" data-locale="en" crossorigin="anonymous"></script>
108
109    
110    <link href="https://paul.reviews/webmentions/receive/" rel="webmention">
111    
111<script defer src="/public/cards.min.js?v=ShRHxgy4po8zN-Wf"></script>
111<style>:root {--ghost-accent-color: #d70947;}</style>
112    <link rel="stylesheet" type="text/css" href="/public/cards.min.css?v=WwnU9jw5ancNC8Gc">
113    <style>
114.author,
115.author-card,
116.author-box,
117.author-profile {
118    display: none !important;
119}
120</style>
121  </head>
122  <body class="tag-template tag-security">
123    
124<div class="w-screen">
125  
126<div
127  data-nav-close
128  class="
129    fixed inset-0 bg-black/20 backdrop-blur-xs z-10 opacity-0 pointer-events-none transition-opacity duration-250
130
131    xl:hidden max-xl:[body[data-nav-open='true']_&]:opacity-100 max-xl:[body[data-nav-open='true']_&]:pointer-events-auto
132  "
133>
134</div>
135
136<aside 
137  class="
138    site-sidebar 
139    
140    fixed top-0 h-screen bg-page border-r border-stroke w-(--site-sidebar-width) z-20 transition-transform duration-250
141    
142    max-xl:-translate-x-full max-xl:[body[data-nav-open='true']_&]:translate-x-0   
143  "
144>
145  <div class="flex flex-col pt-6 pb-16 px-8 max-h-full min-h-screen no-scrollbar overflow-y-auto">
146    <div class="flex items-center justify-between mb-8">
147      
148<a href="https://paul.reviews" class="site-logo " style="" aria-label="Paul Moore: Information Security Consultant &amp; Researcher - Home">
149    <img src="/content/images/2026/09/ChatGPT-Image-Sep-15--2026--06_47_01-PM.png" alt="Paul Moore: Information Security Consultant &amp; Researcher" loading="eager" class="logo"/>
150</a>
151    </div>
152
153      <p class="max-md:hidden text-sm text-content-muted mb-8">Paul Moore: Information Security Consultant &amp; Researcher</p>
154
155    <div class="flex items-center relative w-full mb-8 z-10 xl:hidden" data-ghost-search>
156      <span data-icon="search" class="absolute left-3 top-1/2 -translate-y-1/2 z-1 text-content-alt text-sm"></span>
157      <input type="text" placeholder='Search...' class="w-full input pl-9 shadow-2xs">
158      <span class="absolute right-3 top-1/2 -translate-y-1/2 z-1 text-content-muted text-xs opacity-80" data-search-hint>⌘K</span>
159    </div>
160
161    <menu-nav
162      class="flex flex-1"
163      values-path="themeConfig.site.primaryNavigation"
164      orientation="vertical"
165      nav-class="text-sm"
166      item-class="group w-full flex items-center py-1.5 pr-3 h-8 aria-[current=page]:font-bold aria-[current=page]:text-accent"
167      group-class="flex flex-col whitespace-nowrap flex-wrap h-fit w-full not-first:mt-8"
168      group-header-class="font-medium text-content-alt mb-2 h-5"
169      group-item-class="group w-full flex items-center py-1.5 pl-4 pr-3 h-8 border-l border-stroke/70 aria-[current=page]:font-bold aria-[current=page]:border-l-accent hover:border-l-content/50 aria-[current=page]:text-accent"
170      icon-class="w-4 h-4 line-height-1 mr-3 opacity-70 group-aria-[current=page]:opacity-100 group-hover:opacity-95 transition-opacity duration-250"
171      aria-label="Primary Navigation"
172    ></menu-nav>
173
174    <social-icons class="xl:hidden mt-16 text-sm opacity-90 hover:opacity-100 transition-opacity duration-250" aria-label="Mobile Social Media Links"></social-icons>
175    
176  </div>
177  
178  <div class="sticky max-xl:hidden bottom-0 py-4 px-8 border-t  bg-page/80 backdrop-blur-xs w-full">
179    <social-icons class="text-sm opacity-90 hover:opacity-100 transition-opacity duration-250" aria-label="Desktop Social Media Links"></social-icons>
180  </div>
181</aside>
182  <div class="site-content w-full xl:pl-(--site-sidebar-width)">
183
184    <header class="container relative z-1 items-center justify-between !py-6 hidden xl:flex">
185      <div class="flex items-center relative w-76" data-ghost-search>
186        <span data-icon="search" class="absolute left-3 top-1/2 -translate-y-1/2 z-1 text-content-alt text-sm"></span>
187        <input type="text" placeholder='Search...' class="w-full input pl-9 shadow-2xs">
188        <span class="absolute right-3 top-1/2 -translate-y-1/2 z-1 text-content-muted text-xs opacity-90" data-search-hint>⌘K</span>
189      </div>
190
191      
192    </header>
193
194    <header class="container relative z-1 flex items-center justify-between !py-6 xl:hidden" data-color-scheme="">
195      
196<a href="https://paul.reviews" class="site-logo " style="" aria-label="Paul Moore: Information Security Consultant &amp; Researcher - Home">
197    <img src="/content/images/2026/09/ChatGPT-Image-Sep-15--2026--06_47_01-PM.png" alt="Paul Moore: Information Security Consultant &amp; Researcher" loading="eager" class="logo"/>
198</a>
199      <div role="button" tabindex="0" aria-label="Open navigation menu" class="group flex items-center justify-center w-9 h-9 text-content-alt" data-nav-toggle>
200        <span data-icon="menu_search" class="text-2xl group-hover:scale-105 transition-transform ease-out-quad duration-400 text-content-alt"></span>
201      </div>
202    </header>
203
204    <main id="site-main" role="main" class="container !mt-3">
205      
206
207
208  <section class="flex flex-col md:flex-row items-center gap-6 md:gap-10 py-6 mb-4">
209
210    <div class="relative flex flex-col gap-4">
211      <h1 class="text-center md:text-left">security</h1>
212    </div>
213  </section>
214  
215
216<hr class="mb-6 sm:mb-8"/>
217
218
219<div data-posts class="grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-3 gap-6 sm:gap-8 ">
220    
221<article
222  
223  data-post-id="6aa9886018405a8ea1adc1d9"
224  style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 0)"
225  class="
226    post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)]
227    before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100
228    
229    
230  ">
231
232    
233  <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover ">
234    <img
235      alt="HarmBlock+ World&#x27;s Safest Smartphone: Please Rotate Responsibly."
236      class="group-hover:scale-102 transition-all duration-230 ease-out-quad"
237      loading="lazy"
238      src="/content/images/size/w600/2026/09/banner2.png" 
239      srcset="/content/images/2026/09/banner2.png 320w, 
240              /content/images/size/w600/2026/09/banner2.png 600w, 
241              /content/images/size/w960/2026/09/banner2.png 960w, 
242              /content/images/size/w1200/2026/09/banner2.png 1200w, 
243              /content/images/size/w2000/2026/09/banner2.png 2000w"
244    >
245      <a href="https://paul.reviews/harmblock-worlds-safest-smartphone-please-rotate-responsibly/" class="absolute inset-0 z-10" aria-label="Read: HarmBlock+ World's Safest Smartphone: Please Rotate Responsibly."></a>
246  </figure>
247
248  <a href="/harmblock-worlds-safest-smartphone-please-rotate-responsibly/" class="absolute inset-0 z-0" aria-label="Read: HarmBlock+ World&#x27;s Safest Smartphone: Please Rotate Responsibly."></a>
249
250  <div class="post-card-content flex flex-col ">
251
252    <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7
253      -mt-9 mb-5 mx-3 relative z-10
254      ">
255
256
257    </div>
258
259    <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 ">
260      <a href="/harmblock-worlds-safest-smartphone-please-rotate-responsibly/">HarmBlock+ World&#x27;s Safest Smartphone: Please Rotate Responsibly.</a>
261    </h2>
262
263    <a href="/harmblock-worlds-safest-smartphone-please-rotate-responsibly/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 ">
264        ** NSFW Warning **
265
266Back in July 2025, the Online Safety Act was a hot topic. Many sites were frantically adding age verification under threat of criminal prosecution, if they failed to protect children from online harm.
267
268The law, technology and implementations were... flawed; I presented an AI-generated video of the-then Technology Secretary, Peter Kyle, in order to skip intrusive censorship. That turned out to be unnecessary, as a smiley face drawn on a thumb also bypassed the &quot;robust&quot; verific
269    </a>
270
271    <footer class="flex items-center gap-1.5 mt-2 text-xs ">
272        <div class="post-card-author flex items-center gap-2">
273            <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover">
274          <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a>
275        </div>
276        <span class="text-[0.75em] opacity-65">•</span>
277      <time class="opacity-80" datetime="2026-09-22">
278        <span>3 days ago</span>
279        <span class="hidden">Sep 22, 2026</span>
280      </time>
281    </footer>
282  </div>
283</article>
284    
285<article
286  
287  data-post-id="6aa9420c9a33388bd4fe6375"
288  style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 1)"
289  class="
290    post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)]
291    before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100
292    
293    
294  ">
295
296    
297  <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover ">
298    <img
299      alt="Police CyberAlarm: Abysmal security, yet again."
300      class="group-hover:scale-102 transition-all duration-230 ease-out-quad"
301      loading="lazy"
302      src="/content/images/size/w600/2022/04/small-4.png" 
303      srcset="/content/images/2022/04/small-4.png 320w, 
304              /content/images/size/w600/2022/04/small-4.png 600w, 
305              /content/images/size/w960/2022/04/small-4.png 960w, 
306              /content/images/size/w1200/2022/04/small-4.png 1200w, 
307              /content/images/size/w2000/2022/04/small-4.png 2000w"
308    >
309      <a href="https://paul.reviews/police-cyberalarm-abysmal-security-yet-again/" class="absolute inset-0 z-10" aria-label="Read: Police CyberAlarm: Abysmal security, yet again."></a>
310  </figure>
311
312  <a href="/police-cyberalarm-abysmal-security-yet-again/" class="absolute inset-0 z-0" aria-label="Read: Police CyberAlarm: Abysmal security, yet again."></a>
313
314  <div class="post-card-content flex flex-col ">
315
316    <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7
317      -mt-9 mb-5 mx-3 relative z-10
318      ">
319
320        <a href="https://paul.reviews/tag/security/" class="post-card__tag flex items-center w-fit roun
320ded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300
321          bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100
322          ">
323          security
324        </a>
325
326    </div>
327
328    <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 ">
329      <a href="/police-cyberalarm-abysmal-security-yet-again/">Police CyberAlarm: Abysmal security, yet again.</a>
330    </h2>
331
332    <a href="/police-cyberalarm-abysmal-security-yet-again/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 ">
333        3 attempts, 3 complete failures.  Incredibly, cyberAlarm is now even worse than before.
334    </a>
335
336    <footer class="flex items-center gap-1.5 mt-2 text-xs ">
337        <div class="post-card-author flex items-center gap-2">
338            <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover">
339          <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a>
340        </div>
341        <span class="text-[0.75em] opacity-65">•</span>
342      <time class="opacity-80" datetime="2022-04-19">
343        <span>4 years ago</span>
344        <span class="hidden">Apr 19, 2022</span>
345      </time>
346    </footer>
347  </div>
348</article>
349    
350<article
351  
352  data-post-id="6aa9420c9a33388bd4fe6374"
353  style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 2)"
354  class="
355    post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)]
356    before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100
357    
358    
359  ">
360
361    
362  <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover ">
363    <img
364      alt="TOFU Attack: Your registration flow is a breach waiting to happen..."
365      class="group-hover:scale-102 transition-all duration-230 ease-out-quad"
366      loading="lazy"
367      src="/content/images/size/w600/2026/09/header_image-1.jpg" 
368      srcset="/content/images/2026/09/header_image-1.jpg 320w, 
369              /content/images/size/w600/2026/09/header_image-1.jpg 600w, 
370              /content/images/size/w960/2026/09/header_image-1.jpg 960w, 
371              /content/images/size/w1200/2026/09/header_image-1.jpg 1200w, 
372              /content/images/size/w2000/2026/09/header_image-1.jpg 2000w"
373    >
374      <a href="https://paul.reviews/tofu-attack-your-registration-flow-is-a-breach-waiting-to-happen/" class="absolute inset-0 z-10" aria-label="Read: TOFU Attack: Your registration flow is a breach waiting to happen..."></a>
375  </figure>
376
377  <a href="/tofu-attack-your-registration-flow-is-a-breach-waiting-to-happen/" class="absolute inset-0 z-0" aria-label="Read: TOFU Attack: Your registration flow is a breach waiting to happen..."></a>
378
379  <div class="post-card-content flex flex-col ">
380
381    <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7
382      -mt-9 mb-5 mx-3 relative z-10
383      ">
384
385        <a href="https://paul.reviews/tag/data/" class="post-card__tag flex items-center w-fit rounded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300
386          bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100
387          ">
388          data
389        </a>
390
391    </div>
392
393    <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 ">
394      <a href="/tofu-attack-your-registration-flow-is-a-breach-waiting-to-happen/">TOFU Attack: Your registration flow is a breach waiting to happen...</a>
395    </h2>
396
397    <a href="/tofu-attack-your-registration-flow-is-a-breach-waiting-to-happen/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 ">
398        The risks of failing to validate an email address...
399    </a>
400
401    <footer class="flex items-center gap-1.5 mt-2 text-xs ">
402        <div class="post-card-author flex items-center gap-2">
403            <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover">
404          <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a>
405        </div>
406        <span class="text-[0.75em] opacity-65">•</span>
407      <time class="opacity-80" datetime="2021-03-12">
408        <span>6 years ago</span>
409        <span class="hidden">Mar 12, 2021</span>
410      </time>
411    </footer>
412  </div>
413</article>
414    
415<article
416  
417  data-post-id="6aa9420c9a33388bd4fe6373"
418  style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 3)"
419  class="
420    post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)]
421    before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100
422    
423    
424  ">
425
426    
427  <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover ">
428    <img
429      alt="CyberAlarm: Testing the &quot;production version&quot;... and why you should avoid it."
430      class="group-hover:scale-102 transition-all duration-230 ease-out-quad"
431      loading="lazy"
432      src="/content/images/size/w600/2020/11/cyber-alarm-3.png" 
433      srcset="/content/images/2020/11/cyber-alarm-3.png 320w, 
434              /content/images/size/w600/2020/11/cyber-alarm-3.png 600w, 
435              /content/images/size/w960/2020/11/cyber-alarm-3.png 960w, 
436              /content/images/size/w1200/2020/11/cyber-alarm-3.png 1200w, 
437              /content/images/size/w2000/2020/11/cyber-alarm-3.png 2000w"
438    >
439      <a href="https://paul.reviews/cyberalarm-testing-the-production-version-and-why-you-should-avoid-it/" class="absolute inset-0 z-10" aria-label="Read: CyberAlarm: Testing the "production version"... and why you should avoid it."></a>
440  </figure>
441
442  <a href="/cyberalarm-testing-the-production-version-and-why-you-should-avoid-it/" class="absolute inset-0 z-0" aria-label="Read: CyberAlarm: Testing the &quot;production version&quot;... and why you should avoid it."></a>
443
444  <div class="post-card-content flex flex-col ">
445
446    <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7
447      -mt-9 mb-5 mx-3 relative z-10
448      ">
449
450        <a href="https://paul.reviews/tag/cyberalarm/" class="post-card__tag flex items-center w-fit rounded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300
451          bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100
452          ">
453          cyberalarm
454        </a>
455
456    </div>
457
458    <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 ">
459      <a href="/cyberalarm-testing-the-production-version-and-why-you-should-avoid-it/">CyberAlarm: Testing the &quot;production version&quot;... and why you should avoid it.</a>
460    </h2>
461
462    <a href="/cyberalarm-testing-the-production-version-and-why-you-should-avoid-it/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 ">
463        Reviewing the &quot;production&quot; build of CyberAlarm.  Good grief - you couldn&#x27;t make it up.
464    </a>
465
466    <footer class="flex items-center gap-1.5 mt-2 text-xs ">
467        <div class="post-card-author flex items-center gap-2">
468            <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover">
469          <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a>
470        </div>
471        <span class="text-[0.75em] opacity-65">•</span>
472      <time class="opacity-80" datetime="2020-12-02">
473        <span>6 years ago</span>
474        <span class="hidden">Dec 02, 2020</span>
475      </time>
476    </footer>
477  </div>
478</article>
479    
480<article
481  
482  data-post-id="6aa9420c9a33388bd4fe6372"
483  style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 4)"
484  class="
485    post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)]
486    before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100
487    p-6 bg-page-alt rounded-card justify-center hover:bg-transparent transition-all duration-240 ease-out-quad
488    
489  ">
490
491
492  <a href="/cyberalarm-an-independent-security-review-and-why-you-should-avoid-it/" class="absolute inset-0 z-0" aria-label="Read: CyberAlarm: An independent security review... and why you should avoid it."></a>
493
494  <div class="post-card-content flex flex-col ">
495
496    <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7
497      
498      ">
499
500        <a href="https://paul.reviews/tag/cyberalarm/" class="post-card__tag flex items-center w-fit roun
500ded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300
501          bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100
502          ">
503          cyberalarm
504        </a>
505
506    </div>
507
508    <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 ">
509      <a href="/cyberalarm-an-independent-security-review-and-why-you-should-avoid-it/">CyberAlarm: An independent security review... and why you should avoid it.</a>
510    </h2>
511
512    <a href="/cyberalarm-an-independent-security-review-and-why-you-should-avoid-it/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 ">
513        A brief review of CyberAlarm uncovers several serious concerns.  Please read this before you deploy it.
514    </a>
515
516    <footer class="flex items-center gap-1.5 mt-2 text-xs ">
517        <div class="post-card-author flex items-center gap-2">
518            <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover">
519          <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a>
520        </div>
521        <span class="text-[0.75em] opacity-65">•</span>
522      <time class="opacity-80" datetime="2020-11-24">
523        <span>6 years ago</span>
524        <span class="hidden">Nov 24, 2020</span>
525      </time>
526    </footer>
527  </div>
528</article>
529    
530<article
531  
532  data-post-id="6aa9420c9a33388bd4fe6370"
533  style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 5)"
534  class="
535    post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)]
536    before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100
537    
538    
539  ">
540
541    
542  <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover ">
543    <img
544      alt="SafeBuy: Can you trust a trustmark?"
545      class="group-hover:scale-102 transition-all duration-230 ease-out-quad"
546      loading="lazy"
547      src="/content/images/size/w600/2017/10/SBY0010a-SafebuyConsumerCarelogo.jpg" 
548      srcset="/content/images/2017/10/SBY0010a-SafebuyConsumerCarelogo.jpg 320w, 
549              /content/images/size/w600/2017/10/SBY0010a-SafebuyConsumerCarelogo.jpg 600w, 
550              /content/images/size/w960/2017/10/SBY0010a-SafebuyConsumerCarelogo.jpg 960w, 
551              /content/images/size/w1200/2017/10/SBY0010a-SafebuyConsumerCarelogo.jpg 1200w, 
552              /content/images/size/w2000/2017/10/SBY0010a-SafebuyConsumerCarelogo.jpg 2000w"
553    >
554      <a href="https://paul.reviews/safebuy-can-you-trust-a-trustmark/" class="absolute inset-0 z-10" aria-label="Read: SafeBuy: Can you trust a trustmark?"></a>
555  </figure>
556
557  <a href="/safebuy-can-you-trust-a-trustmark/" class="absolute inset-0 z-0" aria-label="Read: SafeBuy: Can you trust a trustmark?"></a>
558
559  <div class="post-card-content flex flex-col ">
560
561    <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7
562      -mt-9 mb-5 mx-3 relative z-10
563      ">
564
565        <a href="https://paul.reviews/tag/xss/" class="post-card__tag flex items-center w-fit rounded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300
566          bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100
567          ">
568          xss
569        </a>
570
571    </div>
572
573    <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 ">
574      <a href="/safebuy-can-you-trust-a-trustmark/">SafeBuy: Can you trust a trustmark?</a>
575    </h2>
576
577    <a href="/safebuy-can-you-trust-a-trustmark/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 ">
578        Private, secure &amp; trusted... or is it?
579    </a>
580
581    <footer class="flex items-center gap-1.5 mt-2 text-xs ">
582        <div class="post-card-author flex items-center gap-2">
583            <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover">
584          <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a>
585        </div>
586        <span class="text-[0.75em] opacity-65">•</span>
587      <time class="opacity-80" datetime="2017-10-06">
588        <span>9 years ago</span>
589        <span class="hidden">Oct 06, 2017</span>
590      </time>
591    </footer>
592  </div>
593</article>
594    
595<article
596  
597  data-post-id="6aa9420c9a33388bd4fe636f"
598  style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 6)"
599  class="
600    post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)]
601    before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100
602    
603    
604  ">
605
606    
607  <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover ">
608    <img
609      alt="Kervball: The Kerv ring data breach..."
610      class="group-hover:scale-102 transition-all duration-230 ease-out-quad"
611      loading="lazy"
612      src="/content/images/size/w600/2017/06/kerv.jpg" 
613      srcset="/content/images/2017/06/kerv.jpg 320w, 
614              /content/images/size/w600/2017/06/kerv.jpg 600w, 
615              /content/images/size/w960/2017/06/kerv.jpg 960w, 
616              /content/images/size/w1200/2017/06/kerv.jpg 1200w, 
617              /content/images/size/w2000/2017/06/kerv.jpg 2000w"
618    >
619      <a href="https://paul.reviews/kervball-the-kerv-ring-data-breach/" class="absolute inset-0 z-10" aria-label="Read: Kervball: The Kerv ring data breach..."></a>
620  </figure>
621
622  <a href="/kervball-the-kerv-ring-data-breach/" class="absolute inset-0 z-0" aria-label="Read: Kervball: The Kerv ring data breach..."></a>
623
624  <div class="post-card-content flex flex-col ">
625
626    <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7
627      -mt-9 mb-5 mx-3 relative z-10
628      ">
629
630        <a href="https://paul.reviews/tag/security/" class="post-card__tag flex items-center w-fit rounded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300
631          bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100
632          ">
633          security
634        </a>
635
636    </div>
637
638    <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 ">
639      <a href="/kervball-the-kerv-ring-data-breach/">Kervball: The Kerv ring data breach...</a>
640    </h2>
641
642    <a href="/kervball-the-kerv-ring-data-breach/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 ">
643        Here&#x27;s what happened the day my Kerv arrived...
644    </a>
645
646    <footer class="flex items-center gap-1.5 mt-2 text-xs ">
647        <div class="post-card-author flex items-center gap-2">
648            <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover">
649          <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a>
650        </div>
651        <span class="text-[0.75em] opacity-65">•</span>
652      <time class="opacity-80" datetime="2017-06-23">
653        <span>9 years ago</span>
654        <span class="hidden">Jun 23, 2017</span>
655      </time>
656    </footer>
657  </div>
658</article>
659    
660<article
661  
662  data-post-id="6aa9420c9a33388bd4fe636e"
663  style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 7)"
664  class="
665    post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)]
666    before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100
667    
668    
669  ">
670
671    
672  <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover ">
673    <img
674      alt="Don&#x27;t let them paste passwords..."
675      class="group-hover:scale-102 transition-all duration-230 ease-out-quad"
676      loading="lazy"
677      src="/content/images/size/w600/2017/02/header-3.png" 
678      srcset="/content/images/2017/02/header-3.png 320w, 
679              /content/images/size/w600/2017/02/header-3.png 600w, 
680              /content/images/size/w960/2017/02/header-3.png 960w, 
681              /content/images/size/w1200/2017/02/header-3.png 1200w, 
682              /content/images/size/w2000/2017/02/header-3.png 2000w"
683    >
684      <a href="https://paul.reviews/dont-let-them-paste-passwords/" class="absolute inset-0 z-10" aria-label="Read: Don't let them paste passwords..."></a>
685  </figure>
686
687  <a href="/dont-let-them-paste-passwords/" class="absolute inset-0 z-0" aria-label="Read: Don&#x27;t let them paste passwords..."></a>
688
689  <div class="post-card-content flex flex-col ">
690
691    <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7
692      -mt-9 mb-5 mx-3 relative z-10
693      ">
694
695        <a href="https://paul.reviews/tag/2fa/" class="post-card__tag flex items-center w-fit roun
695ded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300
696          bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100
697          ">
698          2fa
699        </a>
700
701    </div>
702
703    <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 ">
704      <a href="/dont-let-them-paste-passwords/">Don&#x27;t let them paste passwords...</a>
705    </h2>
706
707    <a href="/dont-let-them-paste-passwords/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 ">
708        After months of tweets, emails &amp; articles from eminent figures like Troy Hunt &amp; the NCSC, it&#39;s about time I weighed in on the debate surrounding sites which disable a user&#39;s ability to paste passwords.
709
710
711The general consensus amongst many experts, including those mentioned above, is that disabling paste on password fields reduces security; the NCSC went one step further, calling it &quot;completely pointless&quot; and &quot;damaging&quot;.
712
713
714So without further ado, allow me to explain why I believe disabling pas
715    </a>
716
717    <footer class="flex items-center gap-1.5 mt-2 text-xs ">
718        <div class="post-card-author flex items-center gap-2">
719            <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover">
720          <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a>
721        </div>
722        <span class="text-[0.75em] opacity-65">•</span>
723      <time class="opacity-80" datetime="2017-02-18">
724        <span>10 years ago</span>
725        <span class="hidden">Feb 18, 2017</span>
726      </time>
727    </footer>
728  </div>
729</article>
730    
731<article
732  
733  data-post-id="6aa9420c9a33388bd4fe636c"
734  style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 8)"
735  class="
736    post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)]
737    before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100
738    
739    
740  ">
741
742    
743  <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover ">
744    <img
745      alt="Bank &amp; Mobile Network Security: For want of a nail..."
746      class="group-hover:scale-102 transition-all duration-230 ease-out-quad"
747      loading="lazy"
748      src="/content/images/size/w600/2016/05/Bank-Credit-Unions-Security-Services-NYC.jpg" 
749      srcset="/content/images/2016/05/Bank-Credit-Unions-Security-Services-NYC.jpg 320w, 
750              /content/images/size/w600/2016/05/Bank-Credit-Unions-Security-Services-NYC.jpg 600w, 
751              /content/images/size/w960/2016/05/Bank-Credit-Unions-Security-Services-NYC.jpg 960w, 
752              /content/images/size/w1200/2016/05/Bank-Credit-Unions-Security-Services-NYC.jpg 1200w, 
753              /content/images/size/w2000/2016/05/Bank-Credit-Unions-Security-Services-NYC.jpg 2000w"
754    >
755      <a href="https://paul.reviews/bank-mobile-network-security-for-want-of-a-nail/" class="absolute inset-0 z-10" aria-label="Read: Bank & Mobile Network Security: For want of a nail..."></a>
756  </figure>
757
758  <a href="/bank-mobile-network-security-for-want-of-a-nail/" class="absolute inset-0 z-0" aria-label="Read: Bank &amp; Mobile Network Security: For want of a nail..."></a>
759
760  <div class="post-card-content flex flex-col ">
761
762    <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7
763      -mt-9 mb-5 mx-3 relative z-10
764      ">
765
766        <a href="https://paul.reviews/tag/banking/" class="post-card__tag flex items-center w-fit rounded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300
767          bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100
768          ">
769          banking
770        </a>
771
772    </div>
773
774    <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 ">
775      <a href="/bank-mobile-network-security-for-want-of-a-nail/">Bank &amp; Mobile Network Security: For want of a nail...</a>
776    </h2>
777
778    <a href="/bank-mobile-network-security-for-want-of-a-nail/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 ">
779        Ever since publishing a &quot;two factor authentication vs two step verification&quot; article in 2014, I&#39;ve been waiting for an opportunity to irrefutably demonstrate the difference.
780
781
782Note:
783
784This article is very much a &quot;work in progress&quot; as until both exploits are patched, I can&#39;t provide any technical information.
785
786
787
788A quick recap...
789
790
791If you haven&#39;t yet read the above article, let&#39;s quickly recap on the differences between two-factor authentication &amp; two-step verification.
792
793
794A &quot;factor&quot; falls into o
795    </a>
796
797    <footer class="flex items-center gap-1.5 mt-2 text-xs ">
798        <div class="post-card-author flex items-center gap-2">
799            <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover">
800          <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a>
801        </div>
802        <span class="text-[0.75em] opacity-65">•</span>
803      <time class="opacity-80" datetime="2016-05-02">
804        <span>10 years ago</span>
805        <span class="hidden">May 02, 2016</span>
806      </time>
807    </footer>
808  </div>
809</article>
810    
811<article
812  
813  data-post-id="6aa9420c9a33388bd4fe636b"
814  style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 9)"
815  class="
816    post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)]
817    before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100
818    
819    
820  ">
821
822    
823  <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover ">
824    <img
825      alt="EveryKey Revisited: Military grade? Give me a break."
826      class="group-hover:scale-102 transition-all duration-230 ease-out-quad"
827      loading="lazy"
828      src="/content/images/size/w600/2016/04/Everykey-Never-Forget-a-Password-or-Key-Again-01.jpg" 
829      srcset="/content/images/2016/04/Everykey-Never-Forget-a-Password-or-Key-Again-01.jpg 320w, 
830              /content/images/size/w600/2016/04/Everykey-Never-Forget-a-Password-or-Key-Again-01.jpg 600w, 
831              /content/images/size/w960/2016/04/Everykey-Never-Forget-a-Password-or-Key-Again-01.jpg 960w, 
832              /content/images/size/w1200/2016/04/Everykey-Never-Forget-a-Password-or-Key-Again-01.jpg 1200w, 
833              /content/images/size/w2000/2016/04/Everykey-Never-Forget-a-Password-or-Key-Again-01.jpg 2000w"
834    >
835      <a href="https://paul.reviews/everykey-revisited-military-grade-give-me-a-break/" class="absolute inset-0 z-10" aria-label="Read: EveryKey Revisited: Military grade? Give me a break."></a>
836  </figure>
837
838  <a href="/everykey-revisited-military-grade-give-me-a-break/" class="absolute inset-0 z-0" aria-label="Read: EveryKey Revisited: Military grade? Give me a break."></a>
839
840  <div class="post-card-content flex flex-col ">
841
842    <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7
843      -mt-9 mb-5 mx-3 relative z-10
844      ">
845
846        <a href="https://paul.reviews/tag/everykey/" class="post-card__tag flex items-center w-fit rounded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300
847          bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100
848          ">
849          everykey
850        </a>
851
852    </div>
853
854    <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 ">
855      <a href="/everykey-revisited-military-grade-give-me-a-break/">EveryKey Revisited: Military grade? Give me a break.</a>
856    </h2>
857
858    <a href="/everykey-revisited-military-grade-give-me-a-break/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 ">
859        Update 27/04/16:
860
861Here are some screenshots of the EveryKey Windows app.
862
863
864It&#39;s not digitally signed, so there&#39;s no way to ensure it&#39;s genuine and hasn&#39;t been modified, it crashes if you click the toolbar &amp; if you click &quot;forgot password&quot;, it opens Google. To be frank, it looks pretty thrown together at the moment.
865
866
867Thank you for the anonymous tip folks.
868
869
870Update 12/04/16:
871
872EveryKey have replied to this post. Read it here.
873
874
875
876In May 2015, I questioned if EveryKey, one of Kickstarter&#39;s most succe
877    </a>
878
879    <footer class="flex items-center gap-1.5 mt-2 text-xs ">
880        <div class="post-card-author flex items-center gap-2">
881            <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover">
882          <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a>
883        </div>
884        <span class="text-[0.75em] opacity-65">•</span>
885      <time class="opacity-80" datetime="2016-04-08">
886        <span>10 years ago</span>
887        <span class="hidden">Apr 08, 2016</span>
888      </time>
889    </footer>
890  </div>
891</article>
892    
893<article
894  
895  data-post-id="6aa9420c9a33388bd4fe636a"
896  style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 10)"
897  class="
898    post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)]
899    before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100
900    
901    
902  ">
903
904    
905  <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover ">
906    <img
907      alt="PwnPhone: Default passwords allow covert surveillance."
908      class="group-hover:scale-102 transition-all duration-230 ease-out-quad"
909      loading="lazy"
910      src="/content/images/size/w600/2016/02/header1-2.gif" 
911      srcset="/content/images/2016/02/header1-2.gif 320w, 
912              /content/images/size/w600/2016/02/header1-2.gif 600w, 
913              /content/images/size/w960/2016/02/header1-2.gif 960w, 
914              /content/images/size/w1200/2016/02/header1-2.gif 1200w, 
915              /content/images/size/w2000/2016/02/header1-2.gif 2000w"
916    >
917      <a href="https://paul.reviews/pwnphone-default-passwords-allow-covert-surveillance/" class="absolute inset-0 z-10" aria-label="Read: PwnPhone: Default passwords allow covert surveillance."></a>
918  </figure>
919
920  <a href="/pwnphone-default-passwords-allow-covert-surveillance/" class="absolute inset-0 z-0" aria-label="Read: PwnPhone: Default passwords allow covert surveillance."></a>
921
922  <div class="post-card-content flex flex-col ">
923
924    <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7
925      -mt-9 mb-5 mx-3 relative z-10
926      ">
927
928        <a href="https://paul.reviews/tag/snom/" class="post-card__tag flex items-center w-fit rounded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300
929          bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100
930          ">
931          snom
932        </a>
933
934    </div>
935
936    <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 ">
937      <a href="/pwnphone-default-passwords-allow-covert-surveillance/">PwnPhone: Default passwords allow covert surveillance.</a>
938    </h2>
939
940    <a href="/pwnphone-default-passwords-allow-covert-surveillance/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 ">
941        A few weeks ago, I was asked to observe an installation of several wireless access points &amp; VoIP phones, with a view to making recommendations on how best to improve security while maintaining ease of deployment.
942
943
944It didn&#39;t take long for several trends to appear; chief amongst which was the use of
945
946
947
948
949
950We&#39;ll just use defaults, for now. That password will do, for now.
951
952
953
954Of course, as soon as the device burst into life, it&#39;s on to the next one. At which point, &quot;now&quot; becomes a distant memory, alo
955    </a>
956
957    <footer class="flex items-center gap-1.5 mt-2 text-xs ">
958        <div class="post-card-author flex items-center gap-2">
959            <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover">
960          <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a>
961        </div>
962        <span class="text-[0.75em] opacity-65">•</span>
963      <time class="opacity-80" datetime="2016-02-13">
964        <span>11 years ago</span>
965        <span class="hidden">Feb 13, 2016</span>
966      </time>
967    </footer>
968  </div>
969</article>
970    
971<article
972  
973  data-post-id="6aa9420c9a33388bd4fe6369"
974  style="--hover-bg-color:var(--color-page-alt); animation-delay: calc(0.05s * 11)"
975  class="
976    post-card group relative z-0 flex flex-col [--post-card-roundness:calc(var(--radius-card)*2)]
977    before:absolute before:-inset-3 before:rounded-(--post-card-roundness) before:content-[''] before:bg-(--hover-bg-color) before:opacity-0 before:scale-95 before:transition-all before:-z-10 before:duration-240 before:ease-out-quad hover:before:opacity-100 hover:before:scale-100
978    
979    
980  ">
981
982    
983  <figure class="relative post-card-image w-full aspect-(--post-card-image-aspect-ratio) rounded-card overflow-hidden object-cover ">
984    <img
985      alt="Identity theft &amp; payment fraud?  That&#x27;s ASDA price."
986      class="group-hover:scale-102 transition-all duration-230 ease-out-quad"
987      loading="lazy"
988      src="/content/images/size/w600/2016/01/Asda_slogan.png" 
989      srcset="/content/images/2016/01/Asda_slogan.png 320w, 
990              /content/images/size/w600/2016/01/Asda_slogan.png 600w, 
991              /content/images/size/w960/2016/01/Asda_slogan.png 960w, 
992              /content/images/size/w1200/2016/01/Asda_slogan.png 1200w, 
993              /content/images/size/w2000/2016/01/Asda_slogan.png 2000w"
994    >
995      <a href="https://paul.reviews/identity-theft-payment-fraud-thats-asda-price/" class="absolute inset-0 z-10" aria-label="Read: Identity theft & payment fraud?  That's ASDA price."></a>
996  </figure>
997
998  <a href="/identity-theft-payment-fraud-thats-asda-price/" class="absolute inset-0 z-0" aria-label="Read: Identity theft &amp; payment fraud?  That&#x27;s ASDA price."></a>
999
1000  <div class="post-card-content flex flex-col ">
1001
1002    <div class="post-card-meta flex items-center gap-2 mb-2 min-h-7
1003      -mt-9 mb-5 mx-3 relative z-10
1004      ">
1005
1006        <a href="https://paul.reviews/tag/csrf/" class="post-card__tag flex items-center w-fit roun
1006ded-full px-3 py-1.5 text-[10px] font-semibold tracking-wide transition-colors duration-300
1007          bg-black/35 backdrop-blur-sm text-white shadow-[0_0_0_2px_rgba(255,255,255,0.1)] hover:bg-black/50 hover:opacity-100
1008          ">
1009          csrf
1010        </a>
1011
1012    </div>
1013
1014    <h2 class="post-card-title text-xl leading-snug font-semibold line-clamp-2 ">
1015      <a href="/identity-theft-payment-fraud-thats-asda-price/">Identity theft &amp; payment fraud?  That&#x27;s ASDA price.</a>
1016    </h2>
1017
1018    <a href="/identity-theft-payment-fraud-thats-asda-price/" class="post-card-excerpt line-clamp-3 text-sm leading-normal mt-2 opacity-95 ">
1019        Back in March 2014, I contacted ASDA to report several security vulnerabilities and despite a fix promised &quot;in the next few weeks&quot;, little appears to have changed.
1020
1021
1022@Stuho1mez All of our sites are secure, I would advise using Chrome. Thanks, Beth
1023
1024— Asda Service Team (@AsdaServiceTeam) January 14, 2016
1025
1026
1027
1028After 677 days and several tweets along a similar vein, my patience has finally run out.
1029
1030
1031
1032What&#39;s the problem?
1033
1034
1035Two of the simplest and most prevalent exploits allow an attacker to quickly &amp;
1036    </a>
1037
1038    <footer class="flex items-center gap-1.5 mt-2 text-xs ">
1039        <div class="post-card-author flex items-center gap-2">
1040            <img src="https://paul.reviews/content/images/2026/09/fnNCyHOc_400x400.jpg" alt="Paul Moore" class="post-card-author-image w-7 h-7 rounded-full object-cover">
1041          <a href="/author/paul/" class="post-card-author-name opacity-80 hover:underline">Paul Moore</a>
1042        </div>
1043        <span class="text-[0.75em] opacity-65">•</span>
1044      <time class="opacity-80" datetime="2016-01-18">
1045        <span>11 years ago</span>
1046        <span class="hidden">Jan 18, 2016</span>
1047      </time>
1048    </footer>
1049  </div>
1050</article>
1051</div>
1052
1053<div class="hidden">
1054  
1055<div 
1056  class="flex flex-col justify-center gap-4 w-fit mx-auto "
1057  data-infinite="true"
1058>
1059
1060    <a href="/tag/security/page/2/" data-pagination-next hidden></a>
1061    
1062
1063    <div data-pagination-status class="text-center text-muted hidden">
1064      <div class="infinite-scroll-action">
1065          <p class="infinite-scroll-request">Loading...</p>
1066        <p class="infinite-scroll-last !hidden">That&#x27;s everything for now.</p>
1067        <p class="infinite-scroll-error">Error loading more articles. Please try again.</p>
1068      </div>
1069    </div>
1070</div>
1071
1072</div>
1073    </main>
1074
1075    
1076<footer class="pt-6 pb-4 bg-page text-content-alt" data-footer>
1077  <div class="container">
1078    <div class="flex justify-between items-center">
1079      
1080<a href="https://paul.reviews" class="site-logo flex-1" style="" aria-label="Paul Moore: Information Security Consultant &amp; Researcher - Home">
1081    <img src="/content/images/2026/09/ChatGPT-Image-Sep-15--2026--06_47_01-PM.png" alt="Paul Moore: Information Security Consultant &amp; Researcher" loading="eager" class="logo"/>
1082</a>      <social-icons class="flex items-center justify-end flex-1 text-sm opacity-90 hover:opacity-100 transition-opacity duration-250" aria-label="Footer Social Media Links"></social-icons>
1083    </div>
1084
1085    <div class="flex justify-between flex-wrap md:flex-nowrap w-full py-4 my-4 gap-8 border-b border-t  border-b0">
1086      <menu-nav
1087        class="w-full max-md:basis-full flex-1 shrink-0"
1088        values-path="themeConfig.site.secondaryNavigation"
1089        orientation="horizontal"
1090        nav-class="text-sm"
1091        item-class="hover:underline"
1092        group-class="flex flex-col gap-1"
1093        group-header-class="font-medium mb-1"
1094        group-item-class="hover:underline text-sm text-content opacity-90 hover:opacity-100 transition-opacity duration-250"
1095        show-external-icon="true"
1096        aria-label="Footer Navigation"
1097      ></menu-nav>
1098    </div>
1099    <div class="flex justify-center items-center h-5.5">
1100      <p class="text-xs">
1101          &copy; 2026 Published with
1102          <a href="https://ghost.org" target="_blank" rel="noopener" class="underline">Ghost</a>
1103      </p>
1104    </div>
1105  </div>
1106</footer>  </div>
1107</div>
1108
1109
1110    
1111    
1112  
1112<script type="module" src="https://static.cloudflareinsights.com/beacon.min.js/v31edd6df95cf4e85bb4c19e7a9bdbcba1788362987495" integrity="sha512-iIg7k2xntmwu6/uSb5tpc/hySgZc4eoL31yB29W6tJFo2akwjPWcEqnCEdJvGexCL0KEQwVYv5BlowfhVz26hg==" data-cf-beacon='{"version":"2024.11.0","token":"03e8346f4b2d43c293c82f33938b432f","r":1,"spa":2}' crossorigin="anonymous"></script>
1112
1113</body>
1114</html>

Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.