Troy Hunt's Blog
https://www.troyhunt.com/ (RSS)
Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSiteIt sounds easy - "just verify people's age before they access the service" - but whether we're talking about porn in the US or Australia's incoming social media laws, the reality is way more complex than...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.There's a certain irony to the Bluesky situation where people are pushing back when I include links to X. Now, where have we seen this sort of behaviour before? 🤔 When I'm relying on content that only appears on that platform to add...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.I fell waaay behind the normal video cadence this week, and I couldn't care less 😊 I mean c'mon, would you rather be working or sitting here looking at this view after snowboarding through Christmas?! Christmas Day awesomeness in...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.I'm back in Oslo! Writing this the day after recording, it feels like I couldn't be further from Dubai; the temperature starts with a minus, it's snowing and there's not a supercar in sight.Back on business, this week I'm
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.A super quick intro today as I rush off to do the next very Dubai thing: drive a Lambo through the desert to go dirt bike riding before jumping in a Can-Am off-roader and then heading to the kart track for a couple of afternoon...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.Nearly four years ago now, I set out to write a book with Charlotte and RobIt was the stories behind the stories, the things that drove me to write my most important blog posts, and then the things that happened afterwards. It's almost...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.Today, we're happy to welcome the 37th government to have full and free access to domain searches of their gov domains in Have I Been Pwned, Armenia. Armenia's National Computer Incident Response Team AM-CERT now joins three dozen...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.I wouldn't say this is a list of my favourite breaches from this year as that's a bit of a disingenuous term, but oh boy were there some memorable ones. So many of the incidents I deal with are relatively benign in terms of either the
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.I was going to write about how much I've enjoyed "tinkering" with the HIBP API, but somehow, that term doesn't really seem appropriate any more for a service of this scale. On the contrary, we're putting in huge amounts of effort to
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.I've spent more than a decade now writing about how to make Have I Been Pwned (HIBP) fast. Really fast. Fast to the extent that sometimes, it was even too fast:The response from each search was coming back so quickly that the user...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.I have absolutely no problem at all talking about the code I've screwed up. Perhaps that's partly because after 3 decades of writing software (and doing some meaningful stuff along the way), I'm not particularly concerned about showing...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.Apparently, before a child reaches the age of 13, advertisers will have gathered more 72 million data points on them. I knew I'd seen a metric about this sometime recently, so I went looking for "7,000", which perfectly illustrates how...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.This was a much longer than usual update, largely due to the amount of time spent discussing the Earth 2 incident. As I said in the video (many times!), the amount of attention this has garnered from both Earth 2 users and the company...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.I have really clear memories of listening to the Stack Overflow podcast in the late 2000's and hearing Jeff and Joel talk about the various challenges they were facing and the things they did to overcome them. I just suddenly thought...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.Firstly, my apologies for the minute and a bit of echo at the start of this video, OBS had somehow magically decided to start recording both the primary mic and the one built into my camera. Easy fix, moving on...During the livestream,...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.Apparently, Stefan and I trying to work stuff out in real time about how to build more efficient features in HIBP is entertaining watching! If I was to guess, I think it's just seeing people work through the logic of how things work...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.It wasn't easy talking about the Muah.AI data breach. It's not just the rampant child sexual abuse material throughout the system (or at least requests for the AI to generate images of it), it's the reactions of people to it. The...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.Ok, the scenery here is amazing, but the real story is data breach victim notification. Charlotte and I wanted to do this one together today and chat about some of the things we'd been hearing from government and law enforcement on our...