I’m Pwned. You’re Pwned. We’re All Pwned

on YouTube ↗01h 02m

" summary

Shows concrete breaches and defenses: a dataset of 517 million passwords powers a free “pwned passwords” corpus and an API using k-anonymity to avoid sending full hashes, GitHub and many orgs block known-bad passwords; LinkedIn credentials (about 167 million) appear on dark‑web markets; misconfigured S3 buckets and a reported CBA datacenter truck loss of ~12 million records illustrate basic failures; Nissan Leaf app leaks VINs allowing remote heater activation (service goes offline for six weeks) and fixes copy unsafe Stack Overflow code.

AI-written summary · about

" chapters (5)

1. 0:00Start
2. 14:55passwords evolved authentication guidance for the modern era
3. 15:28verify the data breach
4. 26:01look for the green secure text
5. 28:40let's encrypt

" related talks

• 50mHave I Been Pwned?Troy Hunt · GOTO Aarhus 2023
• 48mLessons From Billions of Breached RecordsTroy Hunt · GOTO Copenhagen 2022
• 57mI’m Pwned. You’re Pwned. We’re All Pwned.Troy Hunt · NDC London 2018
• 46mKeynote: Lessons From 11 Billion Breached RecordsTroy Hunt · Black Hat Asia 2021
• 01h 02mI’m Pwned. You’re Pwned. We’re All PwnedTroy Hunt · NDC Oslo 2018
• 47mLessons From Billions of Breached RecordsTroy Hunt · Security Visionaries 2022
• 40mFantastic Passwords and Where to Find ThemPhil Nash · NoRuKo 2020
• 01h 01mThe Internet of Pwned ThingsTroy Hunt · NDC Security Oslo 2020