Troy Hunt
where else to find them
what they talk about
all 9 in the filters
where they keep going back
- NDC Sydney6 editions2016–2026
- NDC Oslo5 editions2016–2024
- NDC London4 editions2017–2020
all 17 in the filters
on a stage with
all 5 in the filters
who talks about the same things
- Niall Merrigan19 talks
- Laura Bell13 talks
- Ben Dechrai29 talks
- Mackenzie Jackson17 talks
- Dwayne McDaniel14 talks
- Aaron Bedra14 talks
| title | conference | date |
|---|---|---|
| Pwned with Purpose: Where Motives Meet Mayhem | NDC Sydney 2026 | 2026-04-22 |
Aggregates show 974 breaches and ~17.5 billion records and illustrate motives: ideological leaks (Ashley Madison), revenge-as-a-service gone wrong… | ||
| Inside the Breach: Secrets Exposed | NDC Melbourne 2025 | 2025-04-29 |
Catalog of breaches shows 15 billion breached records aggregated, Ticketek leaks contain 17.6 million email addresses, and Snowflake intrusions expose… | ||
| From Dreams to Reality: The Magic of 3D Printing | NDC Oslo 2024 | 2024-06-10 |
Live Prusa MK4 prints a 35‑minute keychain sliced in PrusaSlicer, built from a TinkerCAD STL exported as G-code; ChatGPT 4.0 generates Python/STL for a 22 mm… | ||
| Keynote: Hack Your Way to the Top | NDC Oslo 2024 | 2024-06-10 |
Have I Been Pwned aggregates 135 billion records from about 777 breaches and its Pwned Passwords API sees roughly 8.5 billion hits per month (TradingView alone… | ||
| How I Met Your Data | NDC Sydney 2024 | 2024-02-12 |
A forensic tour of real breaches and their abuse: a leaked stash claiming 22 billion records proves many “mother of all” dumps are misconfigured personal… | ||
| Keynote: How I Met Your Data | NDC Security 2024 | 2024-01-09 |
Ten years of indexing breaches becomes a searchable repository of emails now holding 700+ incidents and practical rules like a sensitive flagging workflow that… | ||
| Have I Been Pwned? | GOTO Aarhus 2023 | 2023-05-22 |
Have I Been Pwned describes processing over 11 billion breached records, running Pwned Passwords approaching a billion unique passwords and protecting sites… | ||
| Lessons From Billions of Breached Records | GOTO Copenhagen 2022 | 2022-10-03 |
Creator of haveibeenpwned.com reports processing over 11 billion breached records across ~630 breaches and shows concrete failures: TalkTalk and Optus breaches… | ||
| Lessons From Billions of Breached Records | Security Visionaries 2022 | 2022-01-19 |
A long-running breach index contains 582 services and 11.7 billion records and surfaces concrete patterns: a 17-year-old using sqlmap causes the £77M TalkTalk… | ||
| Lessons From Billions of Breached Records | Security Visionaries 2022 | 2022-01-19 |
Service behind Have I Been Pwned ingests 11.7 billion records and shows concrete patterns: a 17‑year‑old using sqlmap causes the TalkTalk breach that costs… | ||
| Standard Classification: Live Q&A Session | OWASP 20th Anniversary 2021 | 2021-09-24 |
A live Q&A explains what was built and what actually works: a searchable breach service holding 11.5 billion records with a domain search used by half the… | ||
| Keynote: Lessons From 11 Billion Breached Records | Black Hat Asia 2021 | 2021-05-04 |
Creator of Have I Been Pwned processes 11 billion records and now accepts data from FBI, HTCU and BKA, cataloguing incidents such as TalkTalk’s £77M impact… | ||
| The Internet of Pwned Things | NDC London 2020 | 2020-01-27 |
Shows concrete breaches: a stuffed toy maker leaves a open MongoDB no password and voice files in an unencrypted S3 bucket, exposing >800,000 accounts and… | ||
| The Internet of Pwned Things | NDC Security Oslo 2020 | 2020-01-22 |
HaveIBeenPwned aggregates 9.3 billion records across ~425 breaches; CloudPets leaves voice files in a public S3 with references in an open MongoDB, exposing… | ||
| Hack to the Future | NDC Sydney 2019 | 2019-10-14 |
A live rundown of real incidents and fixes: a breach-aggregation service shows 8.5 billion records and verifies breaches like an 186k adultfanfiction dump and… | ||
| Locknote: The Internet of Pwned Things | NDC TechTown 2019 | 2019-09-02 |
If it connects, it can be pwned! As much as we may love IoT, it introduces all new vulnerabilities in places we've never before seen them. We're collecting… | ||
| Hack to the Future | NDC Oslo 2019 | 2019-06-17 |
Built a public breach index now holding 7.86 billion records and shows breaches overlap (adult fanfiction leak: 186,000 records, 79% already seen)… | ||
| Keynote: Hack to the Future | NDC Minnesota 2019 | 2019-05-06 |
Infosec is a continual game of one-upmanship; we build a defence and someone breaks it so we build another one then they break that and the cycle continues… | ||
| Hack to the Future | NDC Security Oslo 2019 | 2019-04-04 |
Demonstrates concrete failures and practical fixes: tapes and hard drives are lost on a truck, a breach of 186,000 records exposes plaintext and MD5 passwords… | ||
| Hack to the Future | NDC London 2019 | 2019-01-30 |
Shows concrete, already-available defenses and real failures: a major bank literally loses data from a truck with ~18 million records, a breached site has 79%… | ||
| How My Dad Taught Me to Code | NDC London 2019 | 2019-01-30 |
Nine‑year‑old Ari shows concrete steps: starting at five with touch puzzles on code.org to learn sequencing and step‑through debugging, moving to CodeCombat to… | ||
| I’m Pwned. You’re Pwned. We’re All Pwned | NDC Sydney 2018 | 2018-09-17 |
Shows concrete breaches and defenses: a dataset of 517 million passwords powers a free “pwned passwords” corpus and an API using k-anonymity to avoid sending… | ||
| How I Pwned My Cloud Costs | .NET Conf 2018 | 2018-09-12 |
A public breach-check service handling billions of records stays on a coffee-budget by replacing autoscaling app-service instances with Azure Functions (67k… | ||
| I’m Pwned. You’re Pwned. We’re All Pwned | NDC Oslo 2018 | 2018-06-11 |
Face it – it’s going to happen. It’s going to happen to you, it’s going to happen to your company and it’s definitely happened to me! Security incidents are… | ||
| I’m Pwned. You’re Pwned. We’re All Pwned. | NDC London 2018 | 2018-01-15 |
Face it – it’s going to happen. It’s going to happen to you, it’s going to happen to your company and it’s definitely happened to me! Security incidents are… | ||
| Hack Your Career | NDC London 2018 | 2018-01-15 |
Starts a blog in 2009 to prove skills, writes a five‑part teamcity subversion webdeploy series and builds a PowerShell Azure automation script that provisions… | ||
| The Hello World Show Live | NDC London 2018 | 2018-01-15 |
Live panel gives concrete fixes and demos: credential stuffing is automated by blasting collated breach lists (one headline list ~1.4B pairs) at other sites… | ||
| Hack Your Career | NDC Sydney 2017 | 2017-08-14 |
A technologist recounts concrete moves: starts a blog since 2009, publishes a five‑part CI/CD series, automates Azure deployments with PowerShell, builds tools… | ||
| Something Something Cyber | NDC Sydney 2017 | 2017-08-14 |
How do dormant cyber pathogens spread? Do hackers really wear hoodies while they hack? And how hard is to become a genuine, bona fide evil cyber hacker… | ||
| Hack Your Career | NDC Oslo 2017 | 2017-06-14 |
Starts a blog in 2009 and writes a five‑part TeamCity series in 2010, documents PowerShell and Azure automation, and publicly builds tooling like an Automated… | ||
| Something Something Cyber | NDC Oslo 2017 | 2017-06-14 |
Live demos show passwords harvested by guessing and social engineering, a Hackertyper gag that matches Hollywood code, and a real-world CDN compromise emulated… | ||
| Make Cyber Great Again | NDC London 2017 | 2017-01-16 |
Argues that no computer is safe and backs it with concrete anecdotes: the TalkTalk breach tied to a teen and a cited £42 million hit, police seizing Amazon… | ||
| Something Something Security | NDC London 2017 | 2017-01-16 |
Shows that weak secrets and trivial social engineering leak real passwords, Google dorking and exposed web.config/FTP files reveal sa credentials and hundreds… | ||
| Making Hacking Childs Play | NDC Sydney 2016 | 2016-08-01 |
Shows that many breaches are done by bored kids using trivial tools and obvious mistakes: a 15‑year‑old exploits SQL injection in TalkTalk, Ashley Madison… | ||
| 50 Shades of AppSec | NDC Sydney 2016 | 2016-08-01 |
Shows how cheap and automated attacks really are: a five year old bypasses Xbox parental controls, a Bishop browser extension and Havij automate discovery and… | ||
| Keynote: Yesterday’s Technology is Dead, Today’s is on Life Support | NDC Oslo 2016 | 2016-06-08 |
Narrative surveys concrete tech shifts: from a 1,200 baud Pressel that required a rotary phone hookup to modern in-flight Wi‑Fi that runs tens of times faster… | ||
| Keynote: 50 Shades of AppSec | AppSecUSA 2015 | 2015-09-22 |
The AppSec industry is enormously diverse and it only continues to diverge as we put more software into more things with more connections. It’s an industry… | ||
| 50 Shades of AppSec | OWASP AppSec Research (AppSecEU) 2015 | 2015-05-19 |
A rapid tour of concrete failures and exploits: easy tools like Bishop browser plug-in and copy‑paste tutorials enable child hackers and phishing; marketplaces… | ||
| Hack Yourself First | Web Directions South 2013 | 2013-10-24 |
Shows how trivial common breaks are: credit card photos scraped from Twitter, FTP-indexed web.configs exposing API keys, and an automated Havage SQL injection… | ||
| nothing matches | ||