I really like his informative posts. I remember reading about how he used k-anonymity to check passwords against the pwned file without having to transmit the passwords and it led to me studying that and later using it for some professional projects.
I sometimes think what I would have done had I never read his posts about checking without transmitting real PII.