Troy Hunt

SEPTEMBER 26, 2018

No HTML tags. I set my desktop to manually resolve through Cloudflare's 1.1.1.1 Somewhere in the middle is a responsible approach, for example the sponsorship banner you see at the top of this blog. Companies I choose to partner with get to appear there and they get themselves 140 characters and a link. That is all. No tracking.

Analytics 109

Analytics Risk IT Security 109

Troy Hunt

AUGUST 21, 2023

There had to be a better way, which brings us to Cloudflare's Turnstile : With Turnstile, we adapt the actual challenge outcome to the individual visitor or browser. The final step is to validate the token and for this I'm using a Cloudflare worker. Here's how it works: Get it?

IT 80

IT Authentication Access 80

Roger's Information Security

JUNE 23, 2018

I also disabled the Better Tag cloud plugin. Tags are better than categories in my opinion. But Tag Clouds are really a think of the past. Lastly, I made some changes to caching at Cloudflare following the cloudflare site settings listed in an article on W3 Total Cache and Cloudflare. Yet here I am.

Cloud 55

Cloud Information Security IT Security 55

Troy Hunt

JUNE 30, 2022

Four and a half years ago now, I rolled out version 2 of HIBP's Pwned Passwords that implemented a really cool k-anonymity model courtesy of the brains at Cloudflare. Later in 2018, I did the same thing with the email address search feature used by Mozilla, 1Password and a handful of other paying subscribers.

Passwords 123

Passwords IT Mining Consumer Services 123

Troy Hunt

AUGUST 7, 2020

Many of the services that HIBP runs on are provided free by the likes of Cloudflare. For free, because he's a good bloke and Cloudflare supported him. The very second blog post on that tag was about how I used Azure Table Storage to make it so fast and so cheap.

Passwords 145

Passwords IT Privacy Libraries 145

Troy Hunt

JULY 23, 2018

Cloudflare makes it easy! SecureOnChrome [link] pic.twitter.com/r2HWkfRofW — Cloudflare (@Cloudflare) July 23, 2018. Continuing that growth rate would take the number to something similar to Cloudflare's above as of now. Make sure your site redirects to #HTTPS , so you don’t have the same problem.

Security 66

Security IT Government Communications 66

Troy Hunt

NOVEMBER 5, 2018

Getting back to the Cloudflare error, a cursory review of the service didn't show any obvious issues. Besides, the ASafaWeb tag on my blog contains many posts that do a great job of explaining the rationale behind the scans.

IT 77

IT Analytics Marketing Cloud 77

Troy Hunt

NOVEMBER 14, 2018

Some brief background first as I'll be sharing this post with a bunch of folks for which this may be new: A CSP is a response header or meta tag that allows you to declare a policy for your website declaring what sorts of content can be loaded from where.

Security 85

Security IT Libraries Access 85

Troy Hunt

DECEMBER 3, 2023

And that's precisely what this 185th blog post tagging HIBP is - the noteworthy things of the years past, including a few things I've never discussed publicly before. And now, a 10th birthday blog post about what really sticks out a decade later. You know why it's called "Have I Been Pwned"? requests in a single day.

Data breaches 145

Data breaches Passwords Sales IT 145

Troy Hunt

JUNE 15, 2023

We can't add a meta tag. Something else I've been working away on in the background is to better leverage Cloudflare's WAF to minimise the impact on the origin services. We don't have any of those 4 aliases on our domain. We can't upload a file. We can't touch DNS.

IT 93

IT Cloud Mining Metadata 93

Troy Hunt

MARCH 21, 2018

Transparency has been a huge part of that effort and I've always written and spoken candidly about my thought processes, how I handle data and very often, the mechanics of how I've built the service (have a scroll through the HIBP tag on this blog for many examples of each).

Data breaches 72

Data breaches Passwords Government IT 72

Troy Hunt

FEBRUARY 11, 2018

This tag was in the source code over at secure.donaldjtrump.com/donate-homepage yet it was pulling script directly off Igor Escobar's GitHub repository for the project. You can safely use an integrity attribute on your script tag because if ever we want to change the implementation, we'll simply rev the version. from its current state.

Libraries 98

Libraries Risk Government IT 98