The Curious Engineer

All blogs / Security

Troy Hunt

troyhunt.com

Hi, I'm Troy Hunt, I write this blog, run "Have I Been Pwned" and am a Microsoft Regional Director and MVP who travels the world speaking at events and training technology professionals

Security

Posts
618 from 16 Jul 2015 to 27 Oct 2026
Posting
weekly (68 in the last year)
Kind
personal blog
Feed
https://www.troyhunt.com/rss/

2026 56

  1. Weekly Update 527: Cybergeddon News v. Reality
  2. Weekly Update 526: Building HIBP AI/SI First
  3. Weekly Update 525: AI Data Breach Hyperbole
  4. Weekly Update 524: Live From Copenhagen
  5. Weekly Update 523: Live From a Norwegian Fjord
  6. Weekly Update 522: Live From Oslo with Scott Helme
  7. Weekly Update 521: Breach Perception v. Reality
  8. Weekly Update 520: The Unscripted Edition
  9. Weekly Update 519: Breaches & Data Integrity
  10. A Cautionary Tale About Data Breach Claims, Verification and Carhartt
  11. Weekly Update 518: IoT Doorlock Nirvana with UniFi
  12. Welcoming the Sri Lankan Government to Have I Been Pwned
  13. Weekly Update 517: Cyber Ransoms
  14. Weekly Update 516: Live From Vietnam
  15. Welcoming the Nepalese Government to Have I Been Pwned
  16. Weekly Update 515: Seeking Caffeine Utopia
  17. Weekly Update 514: This Week in Data Breaches
  18. Weekly Update 513: Clauding The Home Network
  19. Weekly Update 512: IoT Lockout Fail
  20. Weekly Update 511: Live from my Riad in Marrakech
  21. Swimming Pools, Pee, and Trying to Delete Your Data From the Internet
  22. Weekly Update 510: Live From Mallorca with Scott Helme
  23. Weekly Update 509
  24. Weekly Update 508
  25. Weekly Update 507
  26. Welcoming the Philippine Government to Have I Been Pwned
  27. Weekly Update 506
  28. 1,000 Data Breaches Later, the Disclosure Lag is Worse Than Ever
  29. Welcoming the Bhutanese Government to Have I Been Pwned
  30. Weekly Update 505
  31. Weekly Update 504
  32. Welcoming the Bahamian Government to Have I Been Pwned
  33. Welcoming the Bangladesh Government to Have I Been Pwned
  34. Weekly Update 503
  35. Welcoming the Costa Rican Government to Have I Been Pwned
  36. Weekly Update 502
  37. Weekly Update 501
  38. Weekly Update 500
  39. Here's What Agentic AI Can Do With Have I Been Pwned's APIs
  40. Weekly Update 499
  41. Weekly Update 498
  42. HIBP Mega Update: Passkeys, k-Anonymity Searches, Massive Speed Enhancements and a Bulk Domain Verification API
  43. Weekly Update 497
  44. Weekly Update 496
  45. Weekly Update 495
  46. Weekly Update 494
  47. Weekly Update 493
  48. Weekly Update 492
  49. Weekly Update 491
  50. Weekly Update 490
  51. Weekly Update 489
  52. Weekly Update 488
  53. Weekly Update 487
  54. Weekly Update 486
  55. Who Decides Who Doesn’t Deserve Privacy?
  56. Weekly Update 485

2025 84

  1. Weekly Update 484
  2. Weekly Update 483
  3. Weekly Update 482
  4. Processing 630 Million More Pwned Passwords, Courtesy of the FBI
  5. Weekly Update 481
  6. Why Does Have I Been Pwned Contain "Fake" Email Addresses?
  7. Weekly Update 480
  8. Weekly Update 479
  9. Weekly Update 478
  10. Weekly Update 477
  11. 2 Billion Email Addresses Were Exposed, and We Indexed Them All in Have I Been Pwned
  12. Weekly Update 476
  13. How We (Almost) Found Chromium's Bug via Crash Reports to Report URI
  14. Weekly Update 475
  15. Inside the Synthient Threat Data
  16. Weekly Update 474
  17. Weekly Update 473
  18. Court Injunctions are the Thoughts and Prayers of Data Breach Response
  19. Weekly Update 472
  20. Welcoming CERN to Have I Been Pwned
  21. Weekly Update 471
  22. HIBP Demo: Querying the API, and the Free Test Key!
  23. Weekly Update 470
  24. Have I Been Pwned Demos Are Now Live!
  25. Weekly Update 469
  26. Weekly Update 468
  27. Weekly Update 467
  28. Home Assistant + Ubiquiti + AI = Home Automation Magic
  29. Weekly Update 466
  30. Weekly Update 465
  31. That 16 Billion Password Story (AKA "Data Troll")
  32. Get Pwned, Get Local Advice From a Trusted Gov Source
  33. Weekly Update 464
  34. Welcoming Guardio to Have I Been Pwned's Partner Program
  35. Weekly Update 463
  36. Weekly Update 462
  37. 11 Years of Microsoft Regional Director and 15 Years of MVP
  38. Good Riddance Teespring, Hello Fourthwall
  39. Weekly Update 461
  40. Welcoming Aura to Have I Been Pwned's Partner Program
  41. Weekly Update 460
  42. Welcoming Push Security to Have I Been Pwned's Partner Program
  43. Weekly Update 459
  44. Welcoming Truyu to Have I Been Pwned's Partner Program
  45. Weekly Update 458
  46. Weekly Update 457
  47. Weekly Update 456
  48. Weekly Update 455
  49. Weekly Update 454
  50. Weekly Update 453
  51. Have I Been Pwned 2.0 is Now Live!
  52. Weekly Update 452
  53. Welcoming the Malaysian Government to Have I Been Pwned
  54. Weekly Update 451
  55. After the Breach: Finding new Partners with Solutions for Have I Been Pwned Users
  56. Welcoming the Isle of Man Government to Have I Been Pwned
  57. Passkeys for Normal People
  58. Weekly Update 450
  59. The Have I Been Pwned Alpine Grand Tour
  60. Welcoming The Gambia National CSIRT to Have I Been Pwned
  61. Weekly Update 449
  62. You'll Soon Be Able to Sign in to Have I Been Pwned (but Not Login, Log in or Log On)
  63. Weekly Update 448
  64. Weekly Update 447
  65. Weekly Update 446
  66. Weekly Update 445
  67. A Sneaky Phish Just Grabbed my Mailchimp Mailing List
  68. Weekly Update 444
  69. Weekly Update 443
  70. Soft-Launching and Open Sourcing the Have I Been Pwned Rebrand
  71. Weekly Update 442
  72. We're Backfilling and Cleaning Stealer Logs in Have I Been Pwned
  73. Weekly Update 441
  74. Processing 23 Billion Rows of ALIEN TXTBASE Stealer Logs
  75. Weekly Update 440
  76. Weekly Update 439
  77. Weekly Update 438
  78. Weekly Update 437
  79. Weekly Update 436
  80. You Can't Trust Hackers, and Other Data Breach Verification Tales
  81. Weekly Update 435
  82. Experimenting with Stealer Logs in Have I Been Pwned
  83. Weekly Update 434
  84. Weekly Update 433

2024 75

  1. Weekly Update 432
  2. Weekly Update 431
  3. Weekly Update 430
  4. Weekly Update 429
  5. "Pwned", The Book, Is Now Available for Free
  6. Welcoming the Armenian Government to Have I Been Pwned
  7. Weekly Update 428
  8. Weekly Update 427
  9. Closer to the Edge: Hyperscaling Have I Been Pwned with Cloudflare Workers and Caching
  10. Weekly Update 426
  11. Inside the DemandScience by Pure Incubation Data Breach
  12. Weekly Update 425
  13. Weekly Update 424
  14. Weekly Update 423
  15. Weekly Update 422
  16. Weekly Update 421
  17. Weekly Update 420
  18. Weekly Update 419
  19. The Data Breach Disclosure Conundrum
  20. Weekly Update 418
  21. From Dreams to Reality: The Magic of 3D Printing, with Elle Hunt
  22. Weekly Update 417
  23. Weekly Update 416
  24. Weekly Update 415
  25. The North American Have I Been Pwned Tour
  26. Weekly Update 414
  27. The Trouble with Procurement Departments, Resellers and Stripe
  28. Weekly Update 413
  29. Inside the "3 Billion People" National Public Data Breach
  30. Weekly Update 412
  31. Weekly Update 411
  32. Begging for Bounties and More Info Stealer Logs
  33. Weekly Update 410
  34. MVP 14
  35. Weekly Update 409
  36. Weekly Update 408
  37. Weekly Update 407
  38. The State of Data Breaches, Part 2: The Trilogy of Players
  39. Weekly Update 406
  40. The State of Data Breaches
  41. Weekly Update 405
  42. Weekly Update 404
  43. Weekly Update 403
  44. Telegram Combolists and 361M Email Addresses
  45. Weekly Update 402
  46. Operation Endgame
  47. Weekly Update 401
  48. Have I Been Pwned Employee 1.0: Stefán Jökull Sigurðarson
  49. Weekly Update 400
  50. Weekly Update 399
  51. Weekly Update 398
  52. Weekly Update 397
  53. Weekly Update 396
  54. Weekly Update 395
  55. Weekly Update 394
  56. Weekly Update 393
  57. Weekly Update 392
  58. Inside the Massive Alleged AT&T Data Breach
  59. Weekly Update 391
  60. Welcoming the Liechtenstein Government to Have I Been Pwned
  61. Weekly Update 390
  62. Welcoming the German Government to Have I Been Pwned
  63. Weekly Update 389
  64. Weekly Update 388
  65. Thanks FedEx, This is Why we Keep Getting Phished
  66. Weekly Update 387
  67. Weekly Update 386
  68. Weekly Update 385
  69. How Spoutible’s Leaky API Spurted out a Deluge of Personal Data
  70. The Data Breach "Personal Stash" Ecosystem
  71. Weekly Update 384
  72. Weekly Update 383
  73. Inside the Massive Naz.API Credential Stuffing List
  74. Weekly Update 382
  75. Weekly Update 381

2023 70

  1. Weekly Update 380
  2. Weekly Update 379
  3. Weekly Update 378
  4. Weekly Update 377
  5. A Decade of Have I Been Pwned
  6. Weekly Update 376
  7. Weekly Update 375
  8. Weekly Update 374
  9. Acuity Who? Attempts and Failures to Attribute 437GB of Breached Data
  10. Weekly Update 373
  11. Hackers, Scrapers & Fakers: What's Really Inside the Latest LinkedIn Dataset
  12. Weekly Update 372
  13. Weekly Update 371
  14. Weekly Update 370
  15. Weekly Update 369
  16. Weekly Update 368
  17. Safe, Secure, Anonymous, and Other Misleading Claims
  18. Weekly Update 367
  19. Weekly Update 366
  20. Weekly Update 365
  21. Weekly Update 364
  22. Weekly Update 363
  23. 68k Phishing Victims are Now Searchable in Have I Been Pwned, Courtesy of CERT Poland
  24. Data From The Qakbot Malware is Now Searchable in Have I Been Pwned, Courtesy of the FBI
  25. Weekly Update 362
  26. Fighting API Bots with Cloudflare's Invisible Turnstile
  27. Weekly Update 361
  28. All New Have I Been Pwned Domain Search APIs and Splunk Integration
  29. Weekly Update 360
  30. Welcome to the New Have I Been Pwned Domain Search Subscription Service
  31. Weekly Update 359
  32. Weekly Update 358
  33. Weekly Update 357
  34. Weekly Update 356
  35. Lucky MVP 13
  36. Weekly Update 355
  37. Weekly Update 354
  38. Weekly Update 353
  39. Weekly Update 352
  40. Have I Been Pwned Domain Searches: The Big 5 Announcements!
  41. Weekly Update 351
  42. Weekly Update 350
  43. Weekly Update 349
  44. Weekly Update 348
  45. Weekly Update 347
  46. Weekly Update 346
  47. Divorce
  48. Weekly Update 345
  49. Weekly Update 344
  50. Join my Twitter Subscription for the Inside Word on Data Breaches
  51. Weekly Update 343
  52. Weekly Update 342
  53. Seized Genesis Market Data is Now Searchable in Have I Been Pwned, Courtesy of the FBI and "Operation Cookie Monster"
  54. Weekly Update 341
  55. Weekly Update 340
  56. Weekly Update 339
  57. Weekly Update 338
  58. To Infinity and Beyond, with Cloudflare Cache Reserve
  59. Weekly Update 337
  60. Weekly Update 336
  61. Down the Cloudflare / Stripe / OWASP Rabbit Hole: A Tale of 6 Rabbits Deep 🐰 🐰 🐰 🐰 🐰 🐰
  62. Weekly Update 335
  63. Weekly Update 334
  64. Pwned Passwords Adds NTLM Support to the Firehose
  65. Weekly Update 333
  66. Weekly Update 332
  67. Weekly Update 331
  68. Pwned or Bot
  69. Weekly Update 330
  70. Weekly Update 329

2022 76

  1. Weekly Update 328
  2. Weekly Update 327
  3. Weekly Update 326
  4. Weekly Update 325
  5. Weekly Update 324
  6. Weekly Update 323
  7. Get Pwned, for 30% Less!
  8. Data Breach Misattribution, Acxiom & Live Ramp
  9. Weekly Update 322
  10. Weekly Update 321
  11. The Have I Been Pwned API Now Has Different Rate Limits and Annual Billing
  12. Weekly Update 320
  13. Better Supporting the Have I Been Pwned API with Zendesk
  14. Weekly Update 319
  15. Big Changes are Afoot: Expanding and Enhancing the Have I Been Pwned API
  16. Weekly Update 318
  17. Weekly Update 317
  18. Weekly Update 316
  19. Weekly Update 315
  20. Weekly Update 314
  21. Weekly Update 313
  22. Weekly Update 312
  23. "Pwned", the Book, is Finally Here!
  24. Weekly Update 311
  25. Weekly Update 310
  26. Weekly Update 309
  27. Weekly Update 308
  28. Weekly Update 307
  29. Sending Spammers to Password Purgatory with Microsoft Power Automate and Cloudflare Workers KV
  30. Weekly Update 306
  31. Weekly Update 305
  32. If You're Not Paying for the Product, You Are... Possibly Just Consuming Goodwill for Free
  33. Weekly Update 304
  34. Weekly Update 303
  35. MVP Award 12
  36. Welcoming the Polish Government to Have I Been Pwned
  37. Weekly Update 302
  38. Understanding Have I Been Pwned's Use of SHA-1 and k-Anonymity
  39. Weekly Update 301
  40. Weekly Update 300
  41. Weekly Update 299
  42. Welcoming the Indonesian Government to Have I Been Pwned
  43. Weekly Update 298
  44. Weekly Update 297
  45. Downloading Pwned Passwords Hashes with the HIBP Downloader
  46. Weekly Update 296
  47. Weekly Update 295
  48. Weekly Update 294
  49. Weekly Update 293
  50. Weekly Update 292
  51. Weekly Update 291
  52. Breach Disclosure Blow-by-Blow: Here's Why It's so Hard
  53. Welcoming the North Macedonian Government to Have I Been Pwned
  54. Weekly Update 290
  55. Welcoming the Serbian Government to Have I Been Pwned
  56. Weekly Update 289
  57. Welcoming the Bulgarian Government to Have I Been Pwned
  58. Weekly Update 288
  59. Welcoming the Italian Government to Have I Been Pwned
  60. Weekly Update 287
  61. Weekly Update 286
  62. Setting the Bar for Government Access to Have I Been Pwned
  63. Building Password Purgatory with Cloudflare Pages and Workers
  64. Weekly Update 285
  65. Weekly Update 284
  66. I Wanna Go Fast: How Many Pwned Password Queries Can You Make Per Second?
  67. Weekly Update 283
  68. Welcoming the New Zealand Government to Have I Been Pwned
  69. How Everything We're Told About Website Identity Assurance is Wrong
  70. Weekly Update 282
  71. Weekly Update 281
  72. Weekly Update 280
  73. How I Got Pwned by My Cloud Costs
  74. Weekly Update 279
  75. Weekly Update 278
  76. Weekly Update 277

2021 95

  1. Weekly Update 276
  2. Weekly Update 275
  3. Open Source Pwned Passwords with FBI Feed and 225M New NCA Passwords is Now Live!
  4. Weekly Update 274
  5. When is a Scrape a Breach?
  6. Weekly Update 273
  7. A Password Manager Isn't Just for Christmas, It's for Life (So Here's 50% Off!)
  8. Weekly Update 272
  9. Weekly Update 271
  10. Weekly Update 270
  11. Merry #pwnedmas!
  12. Weekly Update 269
  13. Beg Bounties
  14. Weekly Update 268
  15. Weekly Update 267
  16. Weekly Update 266
  17. Pwned - The Collected Blog Posts of Troy Hunt (Preview)
  18. Weekly Update 265
  19. Weekly Update 264
  20. Weekly Update 263
  21. Weekly Update 262
  22. Weekly Update 261
  23. Weekly Update 260
  24. You Don't Need to Burn off Your Fingertips (and Other Biometric Authentication Myths)
  25. Welcoming the Czech Republic Government to Have I Been Pwned
  26. Weekly Update 259
  27. Weekly Update 258
  28. Weekly Update 257
  29. Hello CISO - Brought to You in Collaboration with 1Password
  30. Weekly Update 256
  31. Why No HTTPS? The 2021 Version
  32. Welcoming the Turkish Government to Have I Been Pwned
  33. Weekly Update 255
  34. 3D Printing with Kids on Lenovo Yoga 7i
  35. Weekly Update 254
  36. Weekly Update 253
  37. Your Work Email Address is Your Work's Email Address
  38. Weekly Update 252
  39. The Internet of Things is a Complete Mess (and how to Fix it)
  40. Welcoming the Israeli Government to Have I Been Pwned
  41. Weekly Update 251
  42. MVP 11
  43. Welcoming the Dutch Government to Have I Been Pwned
  44. Weekly Update 250
  45. Welcoming the Slovak Republic Government to Have I Been Pwned
  46. Weekly Update 249
  47. Welcoming the Jamaican Government to Have I Been Pwned
  48. Weekly Update 248
  49. Welcoming the Finnish Government to Have I Been Pwned
  50. Weekly Update 247
  51. Nameless Malware Discovered by NordLocker is Now in Have I Been Pwned
  52. Expanding the Have I Been Pwned Volunteer Community
  53. Welcoming the Uruguayan Government to Have I Been Pwned
  54. Weekly Update 246
  55. Welcoming the Belgian Government to Have I Been Pwned
  56. Welcoming the Dominican Republic Government to Have I Been Pwned
  57. Pwned Passwords, Open Source in the .NET Foundation and Working with the FBI
  58. Weekly Update 245
  59. Welcoming the Trinidad & Tobago Government to Have I Been Pwned
  60. Weekly Update 244
  61. Welcoming the Swedish Government to Have I Been Pwned
  62. Weekly Update 243
  63. Weekly Update 242
  64. Weekly Update 241
  65. Welcoming the Romanian Government to Have I Been Pwned
  66. Welcoming the Luxemburg Government CERT to Have I Been Pwned
  67. Data From The Emotet Malware is Now Searchable in Have I Been Pwned, Courtesy of the FBI and NHTCU
  68. Weekly Update 240
  69. Weekly Update 239
  70. Data Breaches, Class Actions and Ambulance Chasing
  71. Weekly Update 238
  72. Welcoming the Ukrainian Government to Have I Been Pwned
  73. I’m Writing a Book with Rob Conery, and It’s Gonna Be Awesome
  74. The Facebook Phone Numbers Are Now Searchable in Have I Been Pwned
  75. Weekly Update 237
  76. I Now Own the Coinhive Domain. Here's How I'm Fighting Cryptojacking and Doing Good Things with Content Security Policies.
  77. Weekly Update 236
  78. Weekly Update 235
  79. Weekly Update 234
  80. Home Assistant, Pwned Passwords and Security Misconceptions
  81. Weekly Update 233
  82. Gab Has Been Breached
  83. Welcoming the Portuguese Government to Have I Been Pwned
  84. Weekly Update 232
  85. Weekly Update 231
  86. Controlling Smart Lights Using Dumb Switches with Shelly and Home Assistant
  87. Weekly Update 230
  88. Weekly Update 229
  89. Here's How I Meet
  90. Weekly Update 228
  91. Creating a LaMetric App with Cloudflare Workers and KV
  92. Weekly Update 227
  93. Weekly Update 226
  94. Weekly Update 225
  95. Weekly Update 224

2020 98

  1. Weekly Update 223
  2. Weekly Update 222
  3. Weekly Update 221
  4. Weekly Update 220
  5. Weekly Update 219: IoT Unravelled with Scott Helme
  6. IoT Unravelled Part 5: Practical Use Case Videos
  7. IoT Unravelled Part 4: Making it All Work for Humans
  8. IoT Unravelled Part 3: Security
  9. IoT Unravelled Part 2: IP Addresses, Network, Zigbee, Custom Firmware and Soldering
  10. IoT Unravelled Part 1: It's a Mess... But Then There's Home Assistant
  11. Weekly Update 218
  12. Inside the Cit0Day Breach Collection
  13. Weekly Update 217
  14. Weekly Update 216
  15. If You Don't Want Guitar Lessons, Stop Following Me
  16. Weekly Update 215
  17. I've Joined the 1Password Board of Advisers
  18. Humans are Bad at URLs and Fonts Don’t Matter
  19. Weekly Update 214
  20. Weekly Update 213
  21. Customised Ubiquiti Clients and Randomised MAC Addresses on Apple Devices
  22. Weekly Update 212
  23. Welcoming the Canadian Government to Have I Been Pwned
  24. Hacking Grindr Accounts with Copy and Paste
  25. Weekly Update 211
  26. Weekly Update 210
  27. Weekly Update 209
  28. Padlocks, Phishing and Privacy; The Value Proposition of a VPN
  29. Weekly Update 208
  30. Weekly Update 207
  31. We Didn't Encrypt Your Password, We Hashed It. Here's What That Means:
  32. Weekly Update 206
  33. Weekly Update 205
  34. Weekly Update 204
  35. Weekly Update 203
  36. I'm Partnering with NordVPN as a Strategic Advisor
  37. I'm Open Sourcing the Have I Been Pwned Code Base
  38. Weekly Update 202
  39. Weekly Update 201
  40. Building the Ultimate Home Office (Again)
  41. How BeerAdvocate Learned They'd Been Pwned
  42. 10b
  43. Weekly Update 200
  44. Weekly Update 199
  45. A Decade of Microsoft Most Valuable Professional
  46. Weekly Update 198
  47. Sustaining Performance Under Extreme Stress
  48. Weekly Update 197
  49. Weekly Update 196
  50. Pwned Passwords, Version 6
  51. Weekly Update 195
  52. Microsoft Regional Director (Trifecta)
  53. Weekly Update 194
  54. The Unattributable "Lead Hunter" Data Breach
  55. Analysing the (Alleged) Minneapolis Police Department "Hack"
  56. Weekly Update 193
  57. Weekly Update 192
  58. Weekly Update 191
  59. The Unattributable "db8151dd" Data Breach
  60. Weekly Update 190
  61. Weekly Update 189
  62. COVIDSafe App Teardown & Panel Discussion
  63. Weekly Update 188
  64. Weekly Update 187
  65. Welcoming the Icelandic Government to Have I Been Pwned
  66. Let's Stop the 5G Hysteria: Understanding Hoaxes and Disinformation Campaigns
  67. Weekly Update 186
  68. No, I Won't Link to Your Spammy Article
  69. Reassuring Words and Good Intentions Don't Mean Good Security
  70. Weekly Update 185
  71. Weekly Update 184
  72. Welcoming the USA Government to Have I Been Pwned
  73. Coding With Ari, for Kids at Home
  74. Weekly Update 183
  75. There is a Serious Lack of Corporate Responsibility During Breach Disclosures
  76. Everything is Cyber-Broken, The Online Edition!
  77. Hack Yourself First Workshops in Australia, Denmark and Portugal (Virtually, of Course)
  78. Weekly Update 182
  79. Friends Don't Let Friends Use Dodgy WiFi: Introducing Ubiquiti's Dream Machine and FlexHD
  80. Weekly Update 181
  81. Enhancing Pwned Passwords Privacy with Padding
  82. Project Svalbard, Have I Been Pwned and its Ongoing Independence
  83. Weekly Update 180
  84. Handling Huge Traffic Spikes with Azure Functions and Cloudflare
  85. Weekly Update 179
  86. Weekly Update 178
  87. Donating BAT to Have I Been Pwned with Brave Browser
  88. Sharenting, BYOD and Kids Online: 10 Digital Tips for Modern Day Parents
  89. Weekly Update 177
  90. Weekly Update 176
  91. Weekly Update 175
  92. Kids and Code: Object Oriented Programming with Code Combat
  93. Weekly Update 174
  94. Welcoming the Danish Government to Have I Been Pwned
  95. Weekly Update 173
  96. The Difficulty of Disclosure, Surebet247 and the Streisand Effect
  97. Promiscuous Cookies and Their Impending Death via the SameSite Policy
  98. Weekly Update 172

2019 57

  1. Weekly Update 171
  2. When Is Data "Public"? (And 2.5M Public Factual Records in HIBP)
  3. Weekly Update 170
  4. Still Why No HTTPS?
  5. Weekly Update 169
  6. Generated Passwords, UX and Security Absolutism
  7. Weekly Update 168
  8. Weekly Update 167
  9. Welcoming the Swiss Government to Have I Been Pwned
  10. Weekly Update 166
  11. Teach Your Kids to Code with Ari in Oslo and London
  12. Data Enrichment, People Data Labs and Another 622M Email Addresses
  13. When Bank Communication is Indistinguishable from Phishing Attacks
  14. Welcoming the Norwegian Government to HIBP
  15. Weekly Update 165
  16. Weekly Update 164
  17. HSTS From Top to Bottom or GTFO
  18. Weekly Update 163
  19. Weekly Update 162
  20. Weekly Update 161
  21. Weekly Update 160
  22. Weekly Update 159
  23. Weekly Update 158
  24. Weekly Update 157
  25. Banks, Arbitrary Password Restrictions and Why They Don't Matter
  26. Weekly Update 156
  27. Weekly Update 155
  28. Weekly Update 154
  29. Weekly Update 153
  30. Weekly Update 152
  31. Extended Validation Certificates are (Really, Really) Dead
  32. Weekly Update 151
  33. Weekly Update 150
  34. Welcoming the Irish Government to Have I Been Pwned
  35. Weekly Update 149
  36. Weekly Update 148
  37. Authentication and the Have I Been Pwned API
  38. Weekly Update 147
  39. Pwned Passwords, Version 5
  40. Weekly Update 146
  41. Microsoft MVP Award, Year 9
  42. Welcoming the Austrian Government to Have I Been Pwned
  43. Weekly Update 145
  44. Weekly Update 144
  45. Weekly Update 143
  46. Hack Yourself First - The UK Tour by Scott Helme
  47. Project Svalbard: The Future of Have I Been Pwned
  48. Weekly Update 142
  49. Weekly Update 141
  50. Weekly Update 140
  51. PayPal's Beautiful Demonstration of Extended Validation FUD
  52. Weekly Update 139
  53. Weekly Update 138
  54. Weekly Update 137
  55. Weekly Update 136
  56. Weekly Update 135
  57. How to Track Your Kids (and Other People's Kids) With the TicTocTrack Watch

2017 2

  1. Data breach disclosure 101: How to succeed after you've failed
  2. Data from connected CloudPets teddy bears leaked and ransomed, exposing kids' voice messages

2016 4

  1. Here's how I verify data breaches
  2. why I chose to use Ghost
  3. When a nation is hacked: Understanding the ginormous Philippines data breach
  4. private workshops

2015 1

  1. How I optimised my life to make my job redundant