Mastodon

On being a Pluralsight author

I’ve just come back from spending some time over in Utah with Pluralsight and a bunch of fellow authors and as I was last year, I’m all excited and full of great ideas. A bunch of people asked me what it was all about and what it means to be a Pluralsight author so rather than continually giving short responses to individuals, I thought I should articulate things a little more clearly because frankly, it’s all rather exciting. Let me explain. Culture I’d like to think that as Aussies, we’ve g...

Yow! Conference talk – Hack yourself first

Back in December, I was privileged enough to be asked along to the Yow! Conference [http://yowconference.com.au/] road show down here in Australia. I say “road show” as myself and a bunch of speakers from around the world spent a couple of days in Melbourne, a weekend up in sunny Queensland, a couple of days in Brisbane then jetted down to Sydney and spent a couple of days there. It was pretty much the same content in each city, but obviously different audiences. This was my first Yow! and it w...

Secure Account Management with .NET Rocks!

A little while back I wrote about The Conversation [https://www.troyhunt.com/2015/01/introducing-secure-account-management.html], that’s the one I often have with developers looking to build web applications which need to manage accounts but who perhaps haven’t quite thought through all the ins and outs of it. That was also the launch of a new Pluralsight course Secure Account Management Fundamentals [http://www.pluralsight.com/courses/secure-account-management-fundamentals] which goes through...

Stories from the trenches: Sizing and penny pinching with Azure websites

These real world experiences with Azure are now available in the Pluralsight course "Modernizing Your Websites with Azure Platform as a Service" [http://www.pluralsight.com/courses/modernizing-websites-microsoft-azure]How much capacity will you need for your app? Or asked another way if wearing the vendor hat, how much money ya got? We’re generally lousy at estimating infrastructure capacity requirements and even when a more scientific approach is taken (and it’s frequently not), we’re still l...

App sec in Europe!

Through what I can only describe as enormously fortuitous circumstances (and I’ll better qualify that in a later post), I have the bandwidth to do a bunch of things over the next few months that previous commitments kept me from. One of the immediate things I’m now doing is saying “yes” when I previously had to decline. Yes to conferences. Yes to training. Yes to consulting and in the context of this blog post, yes to folks in the EU. I’m off to Europe a couple of times over the coming months f...

Spec’ing, choosing and testing a UPS for the home office

I’ll keep this one pretty much to the point and let the pictures do most of the talking. In my kitchen cupboard, I have this: It may well be related to the vicinity of the chocolate, but the kids seem to like hitting those switches. For some reason, they particularly like doing it when I’m right in the middle of this: Editing Pluralsight courses [http://www.pluralsight.com/author/troy-hunt] is laborious work. I do it on my desktop so I get all four screens to look at and I invariably have...

Introducing my new weekly column, “Security Sense” on Windows IT Pro

Regular readers here will recognise that if there’s one thing I’m generally not short of, it’s security stuff to talk about and personal opinions on the whole thing (maybe that’s two things). Oh and there’s also the thing about spending a whole heap of time writing security training material for Pluralsight [http://www.pluralsight.com/author/troy-hunt] and maintaining Have I been pwned? [https://haveibeenpwned.com/] which all keeps me rather immersed in what I reckon is a very exciting industry....

Introducing AngularJS Security Fundamentals on Pluralsight

If I’m honest, I always found it a bit unusual to get this question: “How do I secure my Angular apps?” I mean, Angular is just JavaScript that runs in the client and a few HTML directives. Ok, it’s very good JavaScript and I don’t mean to trivialise the framework in any way whatsoever, but all the security grunt work still needs to happen on the server. Angular will do nothing for your SQL injection or your lack of access controls on server resources or any of the other really nasty security...

Understanding Azure website auto-scale magic

These real world experiences with Azure are now available in the Pluralsight course "Modernizing Your Websites with Azure Platform as a Service" [http://www.pluralsight.com/courses/modernizing-websites-microsoft-azure]I was helping out a consumer of Have I been pwned? [https://haveibeenpwned.com/] (HIBP) earlier today as they were trying to build up a profile of the pwnage state of their client base. This mean firing a heap of requests at the API [https://haveibeenpwned.com/API/v2] so that they...

Azure WebJobs are awesome and you should start using them right now!

These real world experiences with Azure are now available in the Pluralsight course "Modernizing Your Websites with Azure Platform as a Service" [http://www.pluralsight.com/courses/modernizing-websites-microsoft-azure]No really, they’re totally awesome! I used Azure WebJobs [http://azure.microsoft.com/en-us/documentation/articles/websites-dotnet-webjobs-sdk-get-started/] in the very early days and whilst they served a purpose, I wasn’t blown away with them at the time. In fact I went on to use...