Uploaded January 2019 | Updated September 2026, 1 week ago
It's not uncommon for cybercriminals to combine multiple data sets in order to increase their chances of finding valid user credentials. Security researcher Troy Hunt found the mother of all collections, dubbed "Collection #1". This roll up contains 773M sets of credentials from various breaches.
But why does this work for cybercriminals? Is it an effective technique?
References:
- Troy Hunt on the data collection: troyhunt.com/the-773-million-record-collection-1-data-reach
- Wired's article on the collection: wired.com/story/collection-one-breach-email-accounts-passwords
// MWM Y2-004
It's not uncommon for cybercriminals to combine multiple data sets in order to increase their chances of finding valid user credentials. Security researcher Troy Hunt found the mother of all collections, dubbed "Collection #1". This roll up contains 773M sets of credentials from various breaches.
But why does this work for cybercriminals? Is it an effective technique?
References:
- Troy Hunt on the data collection: troyhunt.com/the-773-million-record-collection-1-data-reach
- Wired's article on the collection: wired.com/story/collection-one-breach-email-accounts-passwords
// MWM Y2-004

![Ubiquiti Breach Is a Case Study in How NOT To Communicate After a Hack #shorts
Ubiquiti Networks was hacked earlier this year and while they did communicate this to their customers, that communication was unclear at best.
Learn more in the short...
Index:
- Who are the victims? [0:00]
- Whistleblower [0:17]
- Three principles [0:24]
#shorts Ubiquiti Breach Is a Case Study in How NOT To Communicate After a Hack #shorts](https://i.ytimg.com/vi/ncTP-C5jAKg/mqdefault.jpg)


![Do You Control the Rights to Your Face? #shorts
Biometrics are a critical tool in information security and of particular interest to cybercriminals but the biggest issues remain with how we train machine learning model and how we get that data.
A fascinating study by Raji & Fried points out that the way these data sets have been gathered has become increasingly problematic. Gone are the days of explicit consent to participate as data is simple vacuumed up from the internet.
The consent issue is huge but so are the bias and discrimination issues introduced with these methods.
Coverage of the research and inspiration for this short via Karen Hao writing for the MIT Technology Review, https://www.technologyreview.com/2021/02/05/1017388/ai-deep-learning-facial-recognition-data-history/
Index:
- The question [0:00]
- Raji & Frieds study [0:08]
- Bias & discrimination in data [0:23]
- Call to action [0:35]
#shorts Do You Control the Rights to Your Face? #shorts](https://i.ytimg.com/vi/og3ZpUagvzg/mqdefault.jpg)
![Can You Train Someone To Spot a Phishing Attack? #shorts
Phishing is a major cybersecurity problem. Most malware infections start through email and phishing sent by cybercriminals and hackers. But is the current solution worse than the problem?
We take a look in this short...
Index:
- The question [0:00]
- Phishing? [0:06]
- Stop testing [0:17]
- Educate [0:43]
#shorts Can You Train Someone To Spot a Phishing Attack? #shorts](https://i.ytimg.com/vi/owT3L5xiSEk/mqdefault.jpg)

![Stop Apps From Tracking You in iOS 14.5...Mostly #shorts
iOS 14.5 is finally here and along with some minor improvements, it introduces App Tracking Transparency (ATT). This feature requires that apps ask permission BEFORE using your devices unique identifier to track you.
Its not perfect but its a huge step forward for privacy and a big blow to Ad Tech.
Learn more in this short...
Learn more about this feature from Apple at https://youtu.be/Ihw_Al4RNno
Index:
- [0:00] iOS 14.5 is here!
- [0:08] App Tracking Transparency
- [0:16] IDFA
- [0:26] Facebook doesnt like this
- [0:39] Stop all tracking...mostly
#shorts Stop Apps From Tracking You in iOS 14.5...Mostly #shorts](https://i.ytimg.com/vi/pBmA0f5EOyM/mqdefault.jpg)
![Can We Improve How Civitas Learning Batch Processed PII in 2017? (Reaction)
In late 2017, Civitas Learning did an AWS This is My Architecture video. It was one of the first. The video walks through how they handled processing personally identifiable information at scale using batch processing.
Now, a few years later, I react to that video and see whats stood the test of time, what could be done simpler given todays technology, and generally critique the design against the AWS Well-Architected Framework in a mini AWS Well-Architected Review.
The original video: https://youtu.be/-S5gs8AGKCw
More on the AWS Well-Architected Framework is at https://aws.amazon.com/architecture/well-architected/
Follow me on Twitter at https://twitter.com/marknca
Read my AWS Hero bio at https://aws.amazon.com/developer/community/heroes/mark-nunnikhoven/
Learn more about the AWS Well-Architected Framework in my course on A Cloud Guru at https://markn.ca/courses/#mastering-the-well-architected-framework
Index:
- [00:00] Intro
- [00:40] Problem statement
- [01:30] Batch processing
- [02:26] AWS services used
- [03:36] Data isolation
- [04:42] EMR limitations
- [06:21] Predictive analytics
- [07:21] Improvements?
- [16:23] Review
- [16:55] Can we improve? Can We Improve How Civitas Learning Batch Processed PII in 2017? (Reaction)](https://i.ytimg.com/vi/q2xevUNOr5c/mqdefault.jpg)

