Troy Hunt - Google+

Troy Hunt

2,518 followers -

Microsoft MVP for Developer Security, Pluralsight author and international speaker, you’ll usually find me talking about web security and “The Cloud”.

2,518 followers

About

Troy's posts

Post has attachment

Public

Post has attachment

Public

Security Sense: The Internet Remains a Fragile Beast

windowsitpro.com

Post has attachment

Troy Hunt

Public

Don't tell people to turn off Windows Update, just don't

troyhunt.com

Daniel “DazzaJay” Fitzgerald: +Troy Hunt I've got a whole new issue with it in the last month, two customer laptops, both with failed hard drives.

Replaced the hard drives, performed a fresh install of windows from the genuine disc, left them to run win update.

First few install fine, then after about the 5th reboot, trustedinstaller.exe (part of win update) just sits there using 100% CPU and thrashes the hell out of the hard drive for about an hour before buggering off. And windows update refuses to check for new updates after that.

So far, the only way I've gotten around it is to streamline all the updates into the windows install disc, and install them during the installation of windows.

Either way, had it with two customers laptops, (HP and Toshiba)
And my own laptops (2 Asus and one Acer)

Either way, it's been a headache.

Even trying to install updates manually through the redist packages causes trustedinstaller to go apeshit.

Daniel “DazzaJay” Fitzgerald: Yeah, good point. Hell, people still think the earth is flat.
And following your security blogs recently, I've noticed you've been around the world.
Have you noticed that the Moon appears Upside-down in the sky in the Northern Hemisphere, compared to how it appears to us here in Aus? - Clearly Earth isn't flat :-P

But yeah, A lot of issues with Win Update all starting around the same time.
My Guess (Yep, not even a theory, just a guess) is that there's an unintentional bug in a particular windows update that only affects some machines.

Daniel “DazzaJay” Fitzgerald: I also saw a thing on the internet around the time it started happening, where some people were claiming that "Microsoft have Sabotaged Windows Update on 7 and 8 to force people to get 10".
But that's probably just random internet tin-foil-hat noise, and probably had nothing do do with the issues I'm having with it.
(As, well, if Windows Update doesn't work, then it can't Auto Update to Windows 10) - Which counts that theory out.

Post has attachment

Public

Post has attachment

Public

Here are all the reasons I don't make passwords available via Have I been pwned

troyhunt.com

Post has attachment

Troy Hunt

Public

Free course: The GDPR Attack Plan

Post has attachment

Public

Zaheer S: Not sure what is unique in them but the email and password are same in all .. so the actual database it is pasted from is same. Can you use something to check percentage of similarity between pastes of same day like in php http://php.net/manual/en/function.similar-text.php ?

Troy Hunt: Ok, so HIBP is doing the right thing, but you're getting a heap of mail. What do you think it should do? Has it stopped now? It's tricky because you probably want to know, but you're getting a lot of email too.

Troy Hunt: +Zaheer S I started storing hashes of the paste a while ago with a view to identifying duplicates but as you say, there are subtle differences. In order to identify the intersection between incidents, I'd need to store all the addresses in a way that I can easily map one set of addresses to another which starts to get tricky. For now, I'll monitor the situation and see what happens, I can see it being the sort of thing that suddenly halts when whoever is behind this changes their mind.

Post has attachment

Troy Hunt

Public

Everything you need to know about the WannaCry / Wcry / WannaCrypt ransomware

troyhunt.com

Post has attachment

Troy Hunt

Public

Clone of Security Sense: Lessons on Ransomware From a Dentist

windowsitpro.com

calvin coleman: +Troy Hunt not a dentist. I'm an engineer. :)

Troy Hunt: +calvin coleman good luck running your standard dentist software!

Dave Bennett: +calvin coleman How many dental packages are out there for Linux? As an engineer, you should make one! Big bucks await! Every dentist who is familiar with Windows will throw away everything the have and flock to your new app, uh... environment, operating system and they'll also enjoy replacing all their other software for the new OS, too.

Post has attachment

Troy Hunt

Public

Weekly update 33 (sunrise edition)

troyhunt.com

Wait while more posts are being loaded

Press question mark to see available shortcut keys