On this weekâs show weâll chat with Troy Hunt of Have I Been Pwned. Heâs released version two of his pwned password service and API. Basically it lets websites check to see if a userâs password is one that he has in his dataset. Version two allows this process to happen without users having to send over a complete password hash to HIBP.
Itâs making some waves already. Itâs a genuinely interesting, free service.
In this weekâs sponsor interview we chat with Trail of Bits security engineer JP Smith about all thing blockchain. Trail of Bits has gotten into blockchain stuff because, hey, weâve all heard about the many, many security issues associated with things like Ethereum smart contracts, and when it comes to blockchain and Ethereum security, well, someone has to do it.
JP will talk us through some of the bug classes he sees as well as talk about the work trail of bits has done on its dynamic binary analysis software Manticore in terms of applying it to the Etherum Virtual Machine.
Adam Boileau, as always, is this weekâs news guest.
The show notes/links are below, and you can follow Adam or Patrick on Twitter if thatâs your thing.