Troy Hunt

Occasionally, someone takes issue with me flagging a data breach as "sensitive" such that the email addresses can't be publicly searched because they want to dox the users. That's a *really* bad idea, for many reasons:

Troy Hunt

Who Decides Who Doesn’t Deserve Privacy?

Remember the Ashley Madison data breach? That was now more than a decade ago, yet it arguably remains the single most noteworthy data breach of all...

I've had this dumb report too many times, and Bruce has finally tipped me over the edge. @npub1rqsm...83hv is a real service that looks up email addresses in actual data breaches, but some people don't understand what an email address actually is

Troy Hunt

Why Does Have I Been Pwned Contain "Fake" Email Addresses?

Normally, when someone sends feedback like this, I ignore it, but it happens often enough that it deserves an explainer, because the answer is real...