Weekly update 42 (Nieuwegein edition)

Sponsored by: Cybercriminals want to interrupt your business. Be unstoppable with Symantec Complete Website Security. Learn how

Well this trip is certainly ending with a bang: 3 blog posts this week (not including this one) plus two massive user group talks in the Netherlands and two workshops of two days each. But that’s it – I’m done! It’s Friday morning here in Nieuwegein at the time of

Continue reading Weekly update 42 (Nieuwegein edition)→

The 5 Stages of Data Breach Grief

Sponsored by: Cybercriminals want to interrupt your business. Be unstoppable with Symantec Complete Website Security. Learn how

When you see something play out enough times, you start to notice patterns. I was reflecting on this today as I watched The AA rapidly digging themselves in deeper and deeper after publishing 13GB worth of customer data to the internet, including partial credit card data. Which they denied:

The

Continue reading The 5 Stages of Data Breach Grief→

Password Strength Indicators Help People Make Ill-Informed Choices

Sponsored by: Cybercriminals want to interrupt your business. Be unstoppable with Symantec Complete Website Security. Learn how

I watched a discussion unfold on Twitter recently which started like so many of the security related ones I see:

When website errors make no sense! @Argos_Online my password is more complex than your system can handle. What gives? @troyhunt #insecurity pic.twitter.com/64VA7qINGP

— Jon Carlos (@billywizz)

Continue reading Password Strength Indicators Help People Make Ill-Informed Choices→

MVP, year 7

Sponsored by: Cybercriminals want to interrupt your business. Be unstoppable with Symantec Complete Website Security. Learn how

Just over 6 years ago, I received my first Microsoft MVP award. It was unexpected, in part because I’d only started doing anything community facing 18 months earlier. But it rated – people were finding what I was doing genuinely useful and that award was an absolutely pivotal moment which

Continue reading MVP, year 7→

Posted in MVP

Weekly update 41 (Southampton edition)

Sponsored by: Log management is ripe for change! Free yourself from by-the-byte pricing with Exabeam Log Manager. Calculate your cost savings

Into week 5 of travel now and I’m in Southampton on the south coast of England. The family holidaying is over and it’s back to workshops and user groups for the remainder of the trip both here in the UK then back in the Netherlands next week.

Despite the schedule,

Continue reading Weekly update 41 (Southampton edition)→

Strawberrynet’s privacy insanity

Sponsored by: Log management is ripe for change! Free yourself from by-the-byte pricing with Exabeam Log Manager. Calculate your cost savings

A little while back, I wrote about Website enumeration insanity and how our personal data was being mishandled. In a nutshell, an enumeration risk boils down to a feature on a website allowing anyone to “ask” if a user exists on the website with the site then returning a positive

Continue reading Strawberrynet’s privacy insanity→

Weekly update 40 (Leiden edition)

Sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Contact us for a demo today.

Another week abroad, this time in the Netherlands and fortunately a combination of time out with the family and just a single workshop. Still, that workshop raised an interesting question around data retention in backups and how the right to erasure under GDPR will be handled. I discuss that from

Continue reading Weekly update 40 (Leiden edition)→

Weekly update 39 (Oslo edition)

Sponsored by: Exabeam – Security doesn’t stop at detection. Automate your response procedures with incident workflows and playbooks. Learn more.

This has probably been the most relentless week I’ve had in one place since… I dunno. Forever? It was all in Oslo and all centred around the NDC event but it meant kicking off with a massive 2 day workshop (50 people – a record!), then an OWASP user group

Continue reading Weekly update 39 (Oslo edition)→

Weekly update 38 (Trondheim edition)

Sponsored by: Help Net Security – Trusted source for daily information security news and analysis

It’s week 2 of my 6-week European summer tour and I’m in Trondheim Norway which frankly, is a pretty awesome place:

Awesome spot 😎 pic.twitter.com/wBAYGShQNH

— Troy Hunt (@troyhunt) June 9, 2017

Being busy with workshops and talks means I’m always going somewhere or doing something so time

Continue reading Weekly update 38 (Trondheim edition)→

Weekly update 37 (Leuven edition)

Sponsored by: Help Net Security – Trusted source for daily information security news and analysis

I’m in Belgium! After 35 hours of travel to Porto in Portugal then 2 days of workshop plus a user group there, I’m now in Leuven which is in the home of epic Belgium beer. I’m now into day 2 of another workshop here after having done a user group

Continue reading Weekly update 37 (Leuven edition)→