Weekly Update 183

Presently sponsored by: Chronicle from Google. Redefining security analytics. Click here to learn about the platform designed for a world that thinks in petabytes.

Geez, where do I even begin? I honestly wasn’t sure, then I could hear the kids playing in the background whilst I was setting up and per the video thought “yeah, stuff it, I’ll leave that in” because as messed up as a bunch of stuff is, life goes on.

Continue reading Weekly Update 183→

There is a Serious Lack of Corporate Responsibility During Breach Disclosures

Presently sponsored by: Chronicle from Google. Redefining security analytics. Click here to learn about the platform designed for a world that thinks in petabytes.

Subject: Data Breach of [your service]

Hi, my name is Troy Hunt and I run the ethical data breach notification service known as Have I Been Pwned: https://haveibeenpwned.com

People regularly send me data from compromised systems which are being traded amongst individuals who collect breaches. Recently, a collection

Continue reading There is a Serious Lack of Corporate Responsibility During Breach Disclosures→

Everything is Cyber-Broken, The Online Edition!

Presently sponsored by: Chronicle from Google. Redefining security analytics. Click here to learn about the platform designed for a world that thinks in petabytes.

Under normal circumstances, we’d be sitting on a stage, beers in hands and doing our (I think we can use this term now) “world famous” Cyber-broken talk.

It’s like Top gear for nerds. @troyhunt #NDCLondon pic.twitter.com/wxzhM6uOCG

— HarryMiller (@HarryMillerr) January 31, 2019

Scott and I

Continue reading Everything is Cyber-Broken, The Online Edition!→

Hack Yourself First Workshops in Australia, Denmark and Portugal (Virtually, of Course)

Presently sponsored by: Chronicle from Google. Redefining security analytics. Click here to learn about the platform designed for a world that thinks in petabytes.

Of course it’s virtual because let’s face it, nobody is going anywhere at the moment. Plenty of you aren’t even going into an office any more let alone fronting up to a conference with hundreds or even thousands of people. That sucks for you because you end up both missing

Continue reading Hack Yourself First Workshops in Australia, Denmark and Portugal (Virtually, of Course)→

Friends Don’t Let Friends Use Dodgy WiFi: Introducing Ubiquiti’s Dream Machine and FlexHD

Presently sponsored by: 1Password is a secure password manager and digital wallet that keeps you safe online

I hate dodgy WiFi, hate it with a passion. I finally lost my mind with it a few years ago now so I went and shelled out good money on the full suite of good Ubiquiti gear. I bought a security gateway to do DHCP, a couple of switches for

Continue reading Friends Don’t Let Friends Use Dodgy WiFi: Introducing Ubiquiti’s Dream Machine and FlexHD→

Weekly Update 181

Presently sponsored by: Duo Security. The Essential Guide to Securing Remote Access. Download the to explore how to ensure user, device and application trust.

This is the big one. It’s all HIBP and Project Svalbard top to bottom this week and I’ve chosen to exclude everything else in its favour. This is just such an essential part of not just the HIBP narrative, but indeed the narrative of my career and what gets me

Continue reading Weekly Update 181→

Enhancing Pwned Passwords Privacy with Padding

Presently sponsored by: Duo Security. The Essential Guide to Securing Remote Access. Download the to explore how to ensure user, device and application trust.

Since launching version 2 of Pwned Passwords with the k-anonymity model just over 2 years ago now, the thing has really gone nuts (read that blog post for background otherwise nothing from here on will make much sense). All sorts of organisations are employing the service to keep passwords from

Continue reading Enhancing Pwned Passwords Privacy with Padding→

Project Svalbard, Have I Been Pwned and its Ongoing Independence

Presently sponsored by: Duo. Modern security is evolving beyond the perimeter. Download Five Steps to Perimeter-Less Security and secure your application access.

This is going to be a lengthy blog post so let me use this opening paragraph as a summary of where Project Svalbard is at: Have I Been Pwned is no longer being sold and I will continue running it independently. After 11 months of a very intensive process culminating

Continue reading Project Svalbard, Have I Been Pwned and its Ongoing Independence→