corpus.blog
41554 blogs · [ { "id": "01a087dc-cbbc-72fd-8bdb-907d3cb848d9", "title": "No Hacking Required: The Manchester Airports Group Data Breach", "url": "https://scotthelme.ghost.io/no-hacking-required-manchester-airports-group-data-breach/", "published_at": "2026-09-07T09:13:49+00:00" }, { "id": "01a087dc-cbbc-72fd-8bdb-907d3d5d2109", "title": "The ultimate road trip combo: Starlink Mini + UniFi Travel Router", "url": "https://scotthelme.ghost.io/the-ultimate-road-trip-combo-starlink-mini-unifi-travel-router/", "published_at": "2026-08-24T13:50:51+00:00" }, { "id": "01a087dc-cbbc-72fd-8bdb-907d3dda0833", "title": "Introducing dbsc.dev: Does Your Browser Support DBSC?", "url": "https://scotthelme.ghost.io/introducing-dbsc-dev-does-your-browser-support-dbsc/", "published_at": "2026-08-21T13:42:10+00:00" }, { "id": "01a087dc-cbbc-72fd-8bdb-907d3e2e4699", "title": "Device Bound Session Credentials lands in Chrome on macOS", "url": "https://scotthelme.ghost.io/device-bound-session-credentials-lands-in-chrome-on-macos/", "published_at": "2026-08-11T14:25:04+00:00" }, { "id": "01a087dc-cbbc-72fd-8bdb-907d3e3fb378", "title": "Everything I Learned Shipping Device Bound Session Credentials", "url": "https://scotthelme.ghost.io/everything-i-learned-shipping-device-bound-session-credentials/", "published_at": "2026-08-10T16:06:11+00:00" }, { "id": "01a087dc-cbbc-72fd-8bdb-907d3eaa07ca", "title": "Connection Allowlist: a network firewall, built into the browser", "url": "https://scotthelme.ghost.io/connection-allowlist-a-network-firewall-built-into-the-browser/", "published_at": "2026-07-08T16:11:31+00:00" }, { "id": "01a087dc-cbbc-72fd-8bdb-907d3f16e768", "title": "Top 1 Million Analysis – June 2026: The State of Crypto", "url": "https://scotthelme.ghost.io/top-1-million-analysis-june-2026-the-state-of-crypto/", "published_at": "2026-07-01T11:57:14+00:00" }, { "id": "01a087dc-cbbc-72fd-8bdb-907d3f28c9bd", "title": "Top 1 Million Analysis – June 2026: Ten Years of Web Security", "url": "https://scotthelme.ghost.io/top-1-million-analysis-june-2026-ten-years-of-web-security/", "published_at": "2026-06-29T13:40:56+00:00" }, { "id": "01a087dc-cbbc-72fd-8bdb-907d402517c8", "title": "A dead CDN, a wildcard, and an attack waiting to happen: the netdna-ssl.com takeover", "url": "https://scotthelme.ghost.io/a-dead-cdn-a-wildcard-and-an-attack-waiting-to-happen-the-netdna-ssl-com-takeover/", "published_at": "2026-06-24T13:11:54+00:00" }, { "id": "01a087dc-cbbc-72fd-8bdb-907d40490878", "title": "Why No Passkeys? Naming the Top Sites That Still Don't Support Them", "url": "https://scotthelme.ghost.io/why-no-passkeys-naming-the-top-sites-that-still-dont-support-them/", "published_at": "2026-06-22T13:22:10+00:00" }, { "id": "01a087dc-cbbc-72fd-8bdb-907d412917fe", "title": "The Instructure Canvas Breach (2026): How XSS in a Support Ticket Compromised 275 Million Students", "url": "https://scotthelme.ghost.io/the-instructure-canvas-breach-2026-how-xss-in-a-support-ticket-compromised-275-million-students/", "published_at": "2026-06-15T12:21:15+00:00" }, { "id": "01a087dc-cbbc-72fd-8bdb-907d41740601", "title": "Open-Sourcing dbsc-php: a Server Library for Device Bound Session Credentials in PHP", "url": "https://scotthelme.ghost.io/open-sourcing-dbsc-php-a-server-library-for-device-bound-session-credentials-in-php/", "published_at": "2026-06-08T14:00:56+00:00" }, { "id": "01a087dc-cbbc-72fd-8bdb-907d424bd66b", "title": "DBSC Beta at Report URI", "url": "https://scotthelme.ghost.io/dbsc-beta-at-report-uri/", "published_at": "2026-06-05T14:22:22+00:00" }, { "id": "01a087dc-cbbc-72fd-8bdb-907d42c36809", "title": "Device Bound Session Credentials: Making Stolen Cookies Useless", "url": "https://scotthelme.ghost.io/device-bound-session-credentials-making-stolen-cookies-useless/", "published_at": "2026-06-02T10:59:38+00:00" }, { "id": "01a087dc-cbbc-72fd-8bdb-907d42c3982b", "title": "Passkeys, Permissions Policy and Bug Hunting in 1Password's WebAuthn Wrapper", "url": "https://scotthelme.ghost.io/passkeys-permissions-policy-and-bug-hunting-in-1passwords-webauthn-wrapper/", "published_at": "2026-05-21T14:40:02+00:00" } ] posts Claim your blog
Back to scotthelme.ghost.io
Blog · corpus.blog/blogs/scotthelme.ghost.io/posts

scotthelme.ghost.io

scotthelme.ghost.io

2026

No Hacking Required: The Manchester Airports Group Data Breachoriginal ↗
7 Sept 2026
The ultimate road trip combo: Starlink Mini + UniFi Travel Routeroriginal ↗
24 Aug 2026
Introducing dbsc.dev: Does Your Browser Support DBSC?original ↗
21 Aug 2026
Device Bound Session Credentials lands in Chrome on macOSoriginal ↗
11 Aug 2026
Everything I Learned Shipping Device Bound Session Credentialsoriginal ↗
10 Aug 2026
Connection Allowlist: a network firewall, built into the browseroriginal ↗
8 Jul 2026
Top 1 Million Analysis – June 2026: The State of Cryptooriginal ↗
1 Jul 2026
Top 1 Million Analysis – June 2026: Ten Years of Web Securityoriginal ↗
29 Jun 2026
A dead CDN, a wildcard, and an attack waiting to happen: the netdna-ssl.com takeoveroriginal ↗
24 Jun 2026
Why No Passkeys? Naming the Top Sites That Still Don't Support Themoriginal ↗
22 Jun 2026
The Instructure Canvas Breach (2026): How XSS in a Support Ticket Compromised 275 Million Studentsoriginal ↗
15 Jun 2026
Open-Sourcing dbsc-php: a Server Library for Device Bound Session Credentials in PHPoriginal ↗
8 Jun 2026
DBSC Beta at Report URIoriginal ↗
5 Jun 2026
Device Bound Session Credentials: Making Stolen Cookies Uselessoriginal ↗
2 Jun 2026
Passkeys, Permissions Policy and Bug Hunting in 1Password's WebAuthn Wrapperoriginal ↗
21 May 2026