Troy Hunt's Blog

http://feeds.feedburner.com/TroyHunt (RSS订阅地址)

Weekly Update 516: Live From Vietnam

<a href="https://report-uri.com/?src=troyhunt.com">Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite</a>A little wind noise, a little connectivity flakiness, and a little lip-sync issues from YouTube, but look at that view! 🤩 Back to business, it's the Brinks Home FAQ I found most interesting this week. I mean, how do you write your own FAQ then fail to

2026/8/12

Welcoming the Nepalese Government to Have I Been Pwned

<a href="https://report-uri.com/?src=troyhunt.com">Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite</a>Today, we welcome the 47th government onboarded to Have I Been Pwned’s free gov service: Nepal. <a href="https://www.ncsc.gov.np/?ref=troyhunt.com" rel="noreferrer">Their National Cyber Security Centre</a> now has access to monitor Nepalese government domains against the data in HIBP. This gives the NCSC the ability to identify exposure across government email addresses and

2026/8/3

Weekly Update 515: Seeking Caffeine Utopia

<a href="https://report-uri.com/?src=troyhunt.com">Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite</a>Apparently, Aussies are so obsessed with coffee that <a href="https://www.sbs.com.au/language/english/en/podcast-episode/australias-coffee-culture-explained/4b2i2n6ka?ref=troyhunt.com" rel="noreferrer">it's referred to as the coffee capital of the world down here</a> (some bits, at least). "But what about Italy?" people ask. Having spent a lot of time in a lot of Italy, no, it's just

2026/8/3

Weekly Update 514: This Week in Data Breaches

<a href="https://report-uri.com/?src=troyhunt.com">Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite</a>The Origin Energy breach down here in Aus is all over the news this week, and as with many breaches, it's multi-faceted. You've got them leading with "don't worry, your credit card is fine", the hacker leading with "they didn&

2026/7/26

Weekly Update 513: Clauding The Home Network

<a href="https://report-uri.com/?src=troyhunt.com">Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite</a>I reckon this week's video on how Claude is tying together info from UniFi, Home Assistant and the Pi-Hole is an absolute ripper. Or at least the concept is - if ever there was an actual value proposition for AI it's taking lots of noise and

2026/7/21

Weekly Update 512: IoT Lockout Fail

<a href="https://report-uri.com/?src=troyhunt.com">Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite</a>"Build a smart home", they said. "It'll make life so much better", they said. Well, life wasn't very bloody good at 23:00 the other night after travelling 33 hours from Paris only to find the IoT doorlock batteries dead and <a href="https://www.youtube.com/shorts/80aQgCXr8Ko?ref=troyhunt.com" rel="noreferrer">the</a>

2026/7/15

Weekly Update 511: Live from my Riad in Marrakech

<a href="https://report-uri.com/?src=troyhunt.com">Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite</a>How's this for a location?! I mean, last week was nice with Scott in Mallorca, but Marrakech is, well, wow 😮 Anyway, about those data breaches... This week I'm talking about <a href="https://www.troyhunt.com/swimming-pools-pee-and-trying-to-delete-your-data-from-the-internet/" rel="noreferrer">the futility of attempting to remove piss from a pool</a>, yet here we are, with

2026/7/8

Swimming Pools, Pee, and Trying to Delete Your Data From the Internet

<a href="https://report-uri.com/?src=troyhunt.com">Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite</a>I can't recall if someone else originally came up with this saying or if I said it in some off-the-cuff comment and it just propagated, but since <a href="https://www.standard.co.uk/lifestyle/how-to-delete-yourself-from-the-internet-a4384456.html?ref=troyhunt.com" rel="noreferrer">it's often attributed back to me</a>, I'll relay it here regardless:<blockquote>Trying to delete yourself</blockquote>

2026/7/3

Weekly Update 510: Live From Mallorca with Scott Helme

<a href="https://report-uri.com/?src=troyhunt.com">Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite</a>How's the view?! Back to business, it's now 8 years ago that Scott and I thought it would be a cool idea to build <a href="https://www.troyhunt.com/why-no-https-heres-the-worlds-largest-websites-not-redirecting-insecure-requests/" rel="noreferrer">Why no HTTPS?</a> We used the site to shame companies for not implementing their transport later security property, and to make it

2026/6/30

Weekly Update 509

<a href="https://report-uri.com/?src=troyhunt.com">Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite</a>I know enough about home cinema audiovisual to know there's a lot I don't know. It's conscious incompetence, if you like, which is different to the unconscious incompetence most people have on the topic. That's not to sound derogatory (it's

2026/6/24

Weekly Update 508

<a href="https://report-uri.com/?src=troyhunt.com">Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite</a>Light switches. How on earth is it so hard to find decent light switches?! It sounds ridiculous until you actually spend enough time looking for ones that meet two simple criteria:<ol><li>Aren't stateful (switch is up or down, has to be push-button)</li><li>Looks good</li></ol>Now, I'

2026/6/15

Weekly Update 507

<a href="https://report-uri.com/?src=troyhunt.com">Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite</a>1,000 breaches is one hell of a milestone. It's not just the process of getting data, verifying it, loading it, sending notifications etc, it's all the other stuff that goes into keeping the whole thing afloat. Legal docs. Trademarks. Accounting. Agreements. The most mind-numbingly

2026/6/10

Welcoming the Philippine Government to Have I Been Pwned

<a href="https://report-uri.com/?src=troyhunt.com">Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite</a>Today, we welcome the 46th government onboarded to Have I Been Pwned’s free gov service: the Philippines.The Philippines’ National CERT, working with the Department of Information and Communications Technology, now has access to monitor official government domains against the data in HIBP. This gives their Cyber

2026/6/3

1,000 Data Breaches Later, the Disclosure Lag is Worse Than Ever

<a href="https://report-uri.com/?src=troyhunt.com">Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite</a>Today, I loaded the 1,000th data breach into <a href="https://haveibeenpwned.com/?ref=troyhunt.com" rel="noreferrer">Have I Been Pwned</a>. Reflecting on that milestone number, I pondered how to mark the occasion in writing, and what immediately came to mind was a very simple question: why is it still needed? Especially considering the emergence of privacy regulations

2026/6/1

Weekly Update 506

<a href="https://report-uri.com/?src=troyhunt.com">Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite</a>I'm finding it quite fascinating to watch the current spate of ShinyHunters breaches and dumps. There's the obvious criminality of it all, but then there's also the response from organisations (or lack thereof, as it relates to disclosure to victims), the appearance and disappearance

2026/6/1