Re:The 111M Record Pemiblanc Credential Stuffing List
by r1ch on Tuesday July 10, 2018 @06:18AM
(#17496790)
I really don't think HIBP should even be publishing or notifying people about these. It's almost always existing breaches just merged together in a different way. If I went and grabbed the raw torrents and combined them in various ways I could make hundreds of different "credential stuffing" lists. Would HIBP list and notify people about all of them?
[ Parent
| on HN ]
Re:The 111M Record Pemiblanc Credential Stuffing List
by laken on Tuesday July 10, 2018 @07:28AM
(#17497135)
This post doesn’t mention it, but on past credential stuffing lists that got loaded, Troy mentioned how many were new to the HIBP dataset. I’d assume that there were enough new emails on here to make it worth loading.
Re:The 111M Record Pemiblanc Credential Stuffing List
by r1ch on Tuesday July 10, 2018 @12:41PM
(#17499732)
94% of the email addresses were already in the database according to the Twitter account. 6% still represents many millions in this case, but perhaps it's unnecessary to notify the ones already known.