@troyhunt@infosec.exchange

Troy Hunt @troyhunt@infosec.exchange

· 3w ago

We’re live from Oslo! Weekly update 522 with Scott Helme: https://www.youtube.com/live/r__E-L_3XJ0?is=Ge0u3osp_Qty0-bK

Weekly Update 522: Live From Oslo with Scott Helme

2

0

Troy Hunt @troyhunt@infosec.exchange

· 2w ago

Weekly update is up! We're live from Oslo with @ScottHelme@infosec.exchange talking about the UniFi Travel Router, email signatures, malicious browser extensions and recent conference talks: https://www.troyhunt.com/weekly-update-522/

Weekly Update 522: Live From Oslo with Scott Helme

Troy Hunt

Weekly Update 522: Live From Oslo with Scott Helme

Heads up: the first 7 mins is a bit quiet until we worked out the external mic was misbehaving - sorry! But get through that and have a listen to Scott's experiences with how Report URI is identifying malware-infected machines within orgs, all due to CSP reporting. It's

1

0

Troy Hunt @troyhunt@infosec.exchange

· 4mo ago

That's a massive milestone - 1,000 breaches processed in @haveibeenpwned@infosec.exchange - and it got me wondering why the service is still needed? But you don't have to look far to see why: https://www.troyhunt.com/1000-data-breaches-later-the-disclosure-lag-is-worse-than-ever/

1,000 Data Breaches Later, the Disclosure Lag is Worse Than Ever

Troy Hunt

1,000 Data Breaches Later, the Disclosure Lag is Worse Than Ever

Today, I loaded the 1,000th data breach into Have I Been Pwned. Reflecting on that milestone number, I pondered how to mark the occasion in writing, and what immediately came to mind was a very simple question: why is it still needed? Especially considering the emergence of privacy regulations

22

2

21

0

Troy Hunt @troyhunt@infosec.exchange

· 3mo ago

Just blogged: Swimming Pools, Pee, and Trying to Delete Your Data From the Internet: https://www.troyhunt.com/swimming-pools-pee-and-trying-to-delete-your-data-from-the-internet/

Troy Hunt

Swimming Pools, Pee, and Trying to Delete Your Data From the Internet

I can't recall if someone else originally came up with this saying or if I said it in some off-the-cuff comment and it just propagated, but since it's often attributed back to me, I'll relay it here regardless: Trying to delete yourself from the internet

10

0

6

0

Troy Hunt @troyhunt@infosec.exchange

· 6mo ago

Today, after many months of hard work, we're launching a bunch of new @haveibeenpwned@infosec.exchange features that improve privacy, usability and performance. We're a little team, but we've done a lot since this pic in November. Here are all the details: https://www.troyhunt.com/passkeys-k-anonymity-searches-massive-speed-enhancements-bulk-domain-verification-api/

HIBP Mega Update: Passkeys, k-Anonymity Searches, Massive Speed Enhancements and a Bulk Domain Verification API

Troy Hunt

HIBP Mega Update: Passkeys, k-Anonymity Searches, Massive Speed Enhancements and a Bulk Domain Verification API

For a hobby project built in my spare time to provide a simple community service, Have I Been Pwned sure has, well, "escalated". Today, we support hundreds of thousands of website visitors each day, tens of millions of API queries, and hundreds of millions of password searches. We're processing

21

2

17

0

Troy Hunt @troyhunt@infosec.exchange

· 2mo ago

Weekly update is up! Seeking Caffeine Utopia: Levelling up the Coffee Game with Customised Synesso MVP Hydra; HIBP Roadmap - What Are We Missing? https://www.troyhunt.com/weekly-update-515/

Weekly Update 515: Seeking Caffeine Utopia

Troy Hunt

Weekly Update 515: Seeking Caffeine Utopia

Apparently, Aussies are so obsessed with coffee that it's referred to as the coffee capital of the world down here (some bits, at least). "But what about Italy?" people ask. Having spent a lot of time in a lot of Italy, no, it's just not the same. It'

2

0

3

0

Troy Hunt @troyhunt@infosec.exchange

· 6mo ago

Weekly update is up! Behind the scenes of some of Have I Been Pwned’s most important architectural components https://www.troyhunt.com/weekly-update-495/

Troy Hunt

Weekly Update 495

In the beginning, it was simple. A website, a database and 150M+ email addresses to search. Time has added serverless functions (which run on servers 🤷‍♂️), code on the edge, new data storage constructs and a completely different mechanism for even just querying a simple email address. HIBP is a continually

6

0

1

0

Troy Hunt @troyhunt@infosec.exchange

· 2mo ago

Going live with my weekly vid in 5 mins! This Week in Data Breaches: Origin Energy, OpenAI & Hugging Face, Suno; Whatever Happened to ShinyHunters? https://youtube.com/live/loyRYRP9ce4?feature=share

Weekly Update 514: This Week in Data Breaches

1

0

Troy Hunt @troyhunt@infosec.exchange

· 3mo ago

Replying to

@infoseclogger@infosec.exchange don’t even get me started on prices, you should see the airfares right now 🤑

1

0

Troy Hunt @troyhunt@infosec.exchange

· 3mo ago

Considering making the long trek from Aus to Vegas for the annual cyber things next month. But it’s a long way and we’ve had loads of recent travel, anything amazing happening that could convince us to pull the trigger?

1

3

0

Troy Hunt @troyhunt@infosec.exchange

· 6mo ago

Going live with my weekly vid in 10 mins! Introducing “Bruce the Bot”, our 51c per day OpenClaw-powered humanoid-assisted Zendesk AI agent for Have I Been Pwned: https://youtube.com/live/TSJ_bXb62fY?feature=share

Weekly Update 499

2

4

1

0

Troy Hunt @troyhunt@infosec.exchange

· 6mo ago

Going live with my weekly vid in 10 mins! The Challenges of Running Your Own Business; Here’s All the New Features We Just Launched on Have I Been Pwned https://youtube.com/live/kyBA5OhWKns?feature=share

Weekly Update 498

2

0

1

0

Troy Hunt @troyhunt@infosec.exchange

· 6mo ago

Weekly update is up! Join Me in Investigating Today’s Data Breaches With the PwnedClaw, the OpenClaw Agentic AI Bot Doing My Legwork: https://www.troyhunt.com/weekly-update-497/

Troy Hunt

Weekly Update 497

Day by day, I find we're eeking more goodness out of OpenClaw and finding the sweet spot between what the humans do well and the agent can run off and do on its own. Significantly, we're shifting more and more of the workload to the latter as all

2

0

Troy Hunt @troyhunt@infosec.exchange

· 6mo ago

Going live with my weekly vid in 5 minutes! Join Me in Investigating Today’s Data Breaches With the PwnedClaw, the OpenClaw Agentic AI Bot Doing My Legwork https://youtube.com/live/HQYSfszSzx4?feature=share

Weekly Update 497

2

0

Troy Hunt @troyhunt@infosec.exchange

· 7mo ago

Weekly update is up! Surge of New Breaches; The Figure Breach Only Impacted “Limited” Files; 80% of Aussie Adults Don’t Need ID for Social Media https://www.troyhunt.com/weekly-update-492/

Troy Hunt

Weekly Update 492

The recurring theme this week seems to be around the gap between breaches happening and individual victims finding out about them. It's tempting to blame this on the corporate victim of the breach (the hacked company), but they're simultaneously dealing with a criminal intrusion, a ransom demand, and

2

0

1

0

Troy Hunt @troyhunt@infosec.exchange

· 5mo ago

Only 10 minutes away - Episode 500! A Look Back at 500 Weeks of Vids, Pwning, and Life at HIBP HQ with Charlotte https://youtube.com/live/57W4BAMSY8c?feature=share

Weekly Update 500

1

0

1

0

Troy Hunt @troyhunt@infosec.exchange

· 6mo ago

Replying to

@varx@infosec.exchange good spot! Fixed now, thanks :)

1

0

Troy Hunt @troyhunt@infosec.exchange

· 6mo ago

Weekly update is up! The Challenges of Running Your Own Business; Here’s All the New Features We Just Launched on Have I Been Pwned https://www.troyhunt.com/weekly-update-498/

Troy Hunt

Weekly Update 498

This week, more time than I'd have liked to spend went on talking about the trials of chasing invoices. This is off the back of a customer (who, for now, will remain unnamed), who had invoices stacking back more than 6 months overdue and despite payment terms of 30

1

0

Troy Hunt @troyhunt@infosec.exchange

· 6mo ago

Going live with my weekly vid in 10 mins! Baydöner Breach; Aura Breach; Building PwnedClaw Agentic AI on a Mac Mini to do Data Breach Stuff https://youtube.com/live/WbKbDiMo_qY?feature=share

Weekly Update 496

1

0

Troy Hunt @troyhunt@infosec.exchange

· 7mo ago

Weekly update is up! The Odido Breach and Leaks; The Incentives and Economics for Paying Ransoms; Where Did the Canadian Tire Data Come From? https://www.troyhunt.com/weekly-update-493/

Troy Hunt

Weekly Update 493

The Odido breach leaks were towards the beginning during this week's update. I recorded it the day after the second dump of data had hit, with a third dump coming a few hours later, and a final dump of everything the day after that. From what I hear, it

0

Troy Hunt @troyhunt@infosec.exchange

· 7mo ago

Going live with my weekly vid in 10 mins! The Odido Breach and Leaks; The Incentives and Economics for Paying Ransoms; Where Did the Canadian Tire Data Come From? https://youtube.com/live/2StXrdw6ZeE?feature=share

Weekly Update 493

0

1

0

Troy Hunt @troyhunt@infosec.exchange

· 7mo ago

Going live with my weekly vid in 10 mins! Surge of New Breaches; The Figure Breach Only Impacted “Limited” Files; 80% of Aussie Adults Don’t Need ID for Social Media https://youtube.com/live/nIrMJIz-E1c?feature=share

Weekly Update 492

0

Troy Hunt @troyhunt@infosec.exchange

· 6mo ago

Weekly update is up! Baydöner Breach; Aura Breach; Building PwnedClaw Agentic AI on a Mac Mini to do Data Breach Stuff https://www.troyhunt.com/weekly-update-496/

Troy Hunt

Weekly Update 496

Watching OpenClaw do its thing must be like watching the first plane take flight. It's a bit rickety and stuck together with a lot of sticky tape, but squint and you can see the potential for agentic AI to change the world as we know it. And I don'

0

Troy Hunt @troyhunt@infosec.exchange

· 3mo ago

Weekly update is up! Live From Mallorca with @ScottHelme@infosec.exchange - We’re talking passkeys and Claude Code: https://www.troyhunt.com/weekly-update-510/

Weekly Update 510: Live From Mallorca with Scott Helme

Troy Hunt

Weekly Update 510: Live From Mallorca with Scott Helme

How's the view?! Back to business, it's now 8 years ago that Scott and I thought it would be a cool idea to build Why no HTTPS? We used the site to shame companies for not implementing their transport later security property, and to make it a bit

0

Troy Hunt @troyhunt@infosec.exchange

· 3mo ago

Going live with my weekly vid… now! Live from my Riad in Marrakech: Spain, Italy and Morocco Travels; Swimming Pools, Pee & Data Breaches; I’m Pwned Again: https://www.youtube.com/live/_TfYZuIRvPA?si=obrGyteI2Z4pFaeu

Weekly Update 511: Live from my Riad in Marrakech

0

Troy Hunt @troyhunt@infosec.exchange

· 3mo ago

Weekly update is up! Live from my Riad in Marrakech: Spain, Italy and Morocco Travels; Swimming Pools, Pee & Data Breaches; I’m Pwned Again https://www.troyhunt.com/weekly-update-511/

Weekly Update 511: Live from my Riad in Marrakech

Troy Hunt

Weekly Update 511: Live from my Riad in Marrakech

How's this for a location?! I mean, last week was nice with Scott in Mallorca, but Marrakech is, well, wow 😮 Anyway, about those data breaches... This week I'm talking about the futility of attempting to remove piss from a pool, yet here we are, with various companies wanting

0

Troy Hunt @troyhunt@infosec.exchange

· 3mo ago

Going live with my weekly vid in a few mins! Weekly Update 511: IoT Lockout Fail - Home to Aussie Sunshine; Locked Out by Failed IoT Lock; The Post-holiday Tech Fixes https://youtube.com/live/GN7Xmsr5V34?feature=share

Weekly Update 512: IoT Lockout Fail

0

Troy Hunt @troyhunt@infosec.exchange

· 2mo ago

Weekly update is up! IoT Lockout Fail: Home to Aussie Sunshine; Locked Out by Failed IoT Lock; The Post-holiday Tech Fixes https://www.troyhunt.com/weekly-update-512/

Troy Hunt

Weekly Update 512: IoT Lockout Fail

"Build a smart home", they said. "It'll make life so much better", they said. Well, life wasn't very bloody good at 23:00 the other night after travelling 33 hours from Paris only to find the IoT doorlock batteries dead and the 9V "jump start" procedure completely failing!

0

2

0

Troy Hunt @troyhunt@infosec.exchange

· 2mo ago

Going live with my weekly vid in 10 mins! Clauding The Home Network: Claude + UniFi MCP + Home Assistant MCP + Pi-Hole API = Success? https://youtube.com/live/ZGkOql9f97k?feature=share

Weekly Update 513: Clauding The Home Network

0

Troy Hunt @troyhunt@infosec.exchange

· 2mo ago

Weekly update is up! Clauding The Home Network: Claude + UniFi MCP + Home Assistant MCP + Pi-Hole API = Success? https://www.troyhunt.com/weekly-update-513/

Weekly Update 513: Clauding The Home Network

Troy Hunt

Weekly Update 513: Clauding The Home Network

I reckon this week's video on how Claude is tying together info from UniFi, Home Assistant and the Pi-Hole is an absolute ripper. Or at least the concept is - if ever there was an actual value proposition for AI it's taking lots of noise and converting it

0

Troy Hunt @troyhunt@infosec.exchange

· 2mo ago

Weekly update is up! This Week in Data Breaches: Origin Energy, OpenAI & Hugging Face, Suno; Whatever Happened to ShinyHunters? https://www.troyhunt.com/weekly-update-514/

Weekly Update 514: This Week in Data Breaches

Troy Hunt

Weekly Update 514: This Week in Data Breaches

The Origin Energy breach down here in Aus is all over the news this week, and as with many breaches, it's multi-faceted. You've got them leading with "don't worry, your credit card is fine", the hacker leading with "they didn't respond when I tried to

0

1

0

Troy Hunt @troyhunt@infosec.exchange

· 6mo ago

Replying to

@otte_homan@theblower.au yep, and I keep explaining the controls I put around it. You’re crazy not to in this age.

0

2

0