What developers should know about security with Troy Hunt

<h3>Subscribe on <a href="https://podcasts.apple.com/at/podcast/software-engineering-unlocked/id1477527378?l=en" target="_blank">iTunes</a>, <a href="https://open.spotify.com/show/2wz1OneBIDXpbBYeuyIsJL?si=2I0R0HuaTLK6RT0f7lDIFg" target="_blank">Spotify</a>, <a href="https://www.google.com/podcasts?feed=aHR0cHM6Ly9mZWVkcy5zaW1wbGVjYXN0LmNvbS9LMV9tdjBDSg%3D%3D" target="_blank">Google</a>, <a href="https://www.deezer.com/show/465682" target="_blank">Deezer</a>, or via <a href="https://www.software-engineering-unlocked.com/subscribe/" target="_blank">RSS</a>.</h3><p> </p><p><strong>Have a look at </strong><a href="https://www.michaelagreiler.com/workshops/"><strong>Michaela's Code Review Workshops</strong></a></p><p><strong>Links:</strong></p><ul><li><a href="https://www.troyhunt.com/" target="_blank">Troy’s Website</a></li><li><a href="https://haveibeenpwned.com/" target="_blank">Have I been pwned</a></li><li><a href="https://youtu.be/-MUhcgXBj_A">Talk: Hack your career</a></li><li><a href="https://www.troyhunt.com/the-effectiveness-of-publicly-shaming-bad-security" target="_blank">Shaming for bad security </a></li><li><a href="https://owasp.org/www-project-top-ten/" target="_blank">OWASP Top 10 Web Application Security Risks</a></li></ul><h2>Show notes</h2><p>We start by talking about data breaches, and Troy tells me that he gets information about data breaches several times a day. More data on breaches than he can actually handle. </p><p>When I asked him if people somehow got a data breach fatigue, he said, well, companies are nowadays more judged on how they handle the data breach than on whether they have one or not. </p><p>So, it’s important that companies handle those well. Not like the negative examples from Uber and Equifax. </p><p>Troy explains to me that from his experience he sees that often lawyers give the guidance to not react or publicly share information about a data breach. But that’s not a good strategy, Troy says. Because the ones that break into the website, they feel anonymous, so they will not