MVP Award 12
11 years now, wow 😲 It’s actually 11 and a bit because it was April Fool’s Day in 2011 that my first MVP award came through. At the time, I referred to myself as “The Accidental MVP” as I’d no expectation of
Author Archives: Troy Hunt
Welcoming the Polish Government to Have I Been Pwned
Continuing the rollout of Have I Been Pwned (HIBP) to national governments around the world, today I’m very happy to welcome Poland to the service! The Polish CSIRT GOV is now the 34th onboard the service and has free and open access to APIs allowing them to query
Continue reading Welcoming the Polish Government to Have I Been Pwned
Weekly Update 302
In a complete departure from the norm, this week’s video is the much-requested “cultural differences” one with Charlotte. No tech (other than my occasional plug for the virtues of JavaScript), but lots of experiences from both of us living and working in different parts of the
Understanding Have I Been Pwned’s Use of SHA-1 and k-Anonymity
Four and a half years ago now, I rolled out version 2 of HIBP’s Pwned Passwords that implemented a really cool k-anonymity model courtesy of the brains at Cloudflare. Later in 2018, I did the same thing with the email address search feature used by Mozilla, 1Password and
Continue reading Understanding Have I Been Pwned’s Use of SHA-1 and k-Anonymity
Weekly Update 301
First up, I’m really sorry about the audio quality on this one. It’s the exact same setup I used last week (and carefully tested first) but it’s obviously just super sensitive to the wind. If you look at the trees in the background you
Weekly Update 300
Well, we’re about 2,000km down on this trip and are finally in Melbourne, which was kinda the point of the drive in the first place (things just escalated after that). The whole journey is going into a long tweet thread you can find below (or mute –
Weekly Update 299
How on earth does an enterprise rack-mounted NAS not come with rails to actually install it in the rack?! So yeah, that’s what’s in the box, something that should have been in the original box and not in a separate purchase. Just to add to the
Welcoming the Indonesian Government to Have I Been Pwned
Four years ago now, I started making domains belonging to various governments around the world freely searchable via a set of APIs in Have I Been Pwned. Today, I’m very happy to welcome the 33rd government, Indonesia! As of now, the Indonesian National CERT managed under the National
Continue reading Welcoming the Indonesian Government to Have I Been Pwned
Weekly Update 298
I somehow ended up blasting through an hour and a quarter in this week’s video with loads of discussion on the CTARS / NDIS data breach then a real time “let’s see what the fuss is about” with news that one of our state’
Weekly Update 297
So I basically spent my whole day yesterday playing with Ubiquiti gear and live-tweeting the experience 😊 This was an unapologetically geeky pleasure and it pretty much dominates this week’s video but hey, it’s a fun topic. Still, there’s a bunch of data breach