Viewing profile — troyhunt

Not at all, I continued writing a lot on Twitter and still love the product. I don’t like the way they’re handling this situation though, more in this vid from a few days ago: http…

Try this: http://www.troyhunt.com/2013/12/working-with-154-million-rec...

This might answer your question: haveibeenpwned.com/HowFastIsAzureTableStorage/?email=foo@foo.com I'm writing up how the back end is done and will post it in the next day or two, I…

Oh hey, welcome back :)

The viable alternative is in the sentence you quoted: "Ultimately, password hints are evil and they add nothing to an online system that can’t be achieved with a secure password re…

Hey, thanks for pointing that out, that's the second time I've heard that recently. I think Ghoetery is getting a little over-excited and hiding the parent element containing Disqu…

It's harder to detect the framework when ASP.NET MVC is used. No view state in the source code, no .aspx extensions and the server response headers identifying IIS and ASP.NET can …

There's a good NuGet package for dealing with this now: http://brendanforster.com/blog/custom-server-headers-bad-for...

What it shows is that the server is not configured to return a custom error page when an exception occurs. Beyond the obvious usability issue, this may be used by an attacker to id…

Because rightly or wrongly, there's evidence that it increases consumer confidence and results in more purchases / subscribers / customer love. It's an empty promise, but people bu…

If there was something worth protecting on a personal blog site, it might be a different story. 1 is very on-topic - there's no way that data should be sent in the clear. HSTS is g…

Years and years of experience? Often not, and that's speaking from years and years of experience! Vast sums of money? Yes, at least the outsourcing vendors who churn this sort of t…