Scott Helme

@Scott_Helme

Hacker, researcher, builder of things. Founded @securityheaders/@reporturi, Pluralsight author, Microsoft MVP, award winning entrepreneur. Likes cars.

scotthelme.co.uk

Joined July 2010

Replies Reposts Media

Scott Helme
@Scott_Helme
Sep 16
It's so cool when you see something you built working exactly as intended 😎
Report URI
@reporturi
Sep 16
We deployed an update at 14:00 UTC that introduced a new JavaScript dependency. At 14:04 UTC, Script Watch alerted us to it. That is the visibility you need in the browser: know when new code appears on your site, whether the change is expected or not. Four minutes from
Scott Helme
@Scott_Helme
Sep 15
If you want a free @reporturi account during the beta, and then 50% off your first year as a thankyou, check out our new Magento CSP module in beta! 😎
Report URI
@reporturi
Sep 15
Magento has shipped with CSP enabled by default since 2.3.5, but most stores never configure a reporting endpoint. We found 2,236 Magento sites taking card payments with this exact gap, so we built a free module to fix it: blog.report-uri.com/magento-alread…
1
Scott Helme
@Scott_Helme
Sep 7
They exposed data on 8.8 million people with no exploit, no malware, and no access to MAG’s servers. Three server-side API keys sat in public JavaScript for 4+ years and FulcrumSec found them. They could have modified and deleted data too. I verified how the Manchester
No Hacking Required: The Manchester Airports Group Data Breach
From scotthelme.co.uk
10
Scott Helme
@Scott_Helme
Sep 6
OK, it's not brilliant and the setup needs some work, but I got my first real data down from the weather satellite this morning! It's a homemade antenna on the roof, into a £40 dongle and a raspberry pi. The satellite was METEOR-M2 3, 838 km overhead(!), on 137.9 MHz. Once I
2
Scott Helme
@Scott_Helme
Sep 5
AOS!!! Weather satellite image download, first attempt. 137.9 MHz — Meteor-M N2-4 Dipole antenna @ 120°, aimed north Raspberry Pi 4B + £40 USB dongle Thirteen minutes as it passes 800 km overhead. No idea yet whether it'll work...
2