Troy Hunt

MARCH 1, 2018

I've written extensively about how HIBP has grown over the years and doing so has been a cornerstone of the philosophy of how I've run the service - with maximum transparency. Just to scroll back for a bit of context, anyone who owns a domain can do a free domain search on HIBP. And then it took off.

Government 75

Government Passwords Data breaches Authentication 75

ForAllSecure

APRIL 7, 2021

Welcome to the hacker mind and original podcast from for all secure, it's about challenging our expectations about the people who hack for a living. million InfoSec professionals, as of early 2021 How can that be part of the problem lies in the training pipeline, we really have to do a much better job with that.

Cybersecurity 40

Cybersecurity Information Security IT Security 40

ForAllSecure

APRIL 7, 2021

Welcome to the hacker mind and original podcast from for all secure, it's about challenging our expectations about the people who hack for a living. million InfoSec professionals, as of early 2021 How can that be part of the problem lies in the training pipeline, we really have to do a much better job with that.

Cybersecurity 40

Cybersecurity Information Security IT Security 40

ForAllSecure

SEPTEMBER 10, 2021

And if you're going for a certification like CISSP Computer Information Systems Security Professional, you'll need to have a breadth of experience across multiple domains. So while you may be particularly skilled in security architecture and engineering. So I called up someone from pico CTF, to learn more.

Education 52

Education Cybersecurity IT Marketing 52

ForAllSecure

SEPTEMBER 21, 2021

What role might the security industry have in identifying or even stopping it? The Federal Trade Commission in the United States, banned an app called SpyPhone, and its CEO Scott Zuckerman, from operating in the surveillance industry. Apps that haven't yet been flagged as such, but do the same thing. It's natural.

Passwords 52

Passwords Access IoT IT 52

Troy Hunt

JANUARY 10, 2018

Both during this week and over previous years, there's been various headlines calling the security posture of Aadhaar into question and the Indian government has been vehemently refuting any suggestion that the system isn't top notch. Many people are doing that just now, including myself regarding that "hack-proof" claim.

Security 111

Security Government Encryption Risk 111

Troy Hunt

NOVEMBER 14, 2017

I run a workshop titled Hack Yourself First in which people usually responsible for building web apps get to try their hand at breaking them. That's pretty much XSS 101 - just get an alert box to fire - and reflecting a script tag is one of the most fundamental techniques attackers use to run their script on your website.

Analytics 87

Analytics Libraries IT Risk 87