Re:The 773M Record “Collection #1” Data Breach
by zawerf on Thursday January 17, 2019 @03:44AM
(#18929300)
I am not sure you should put too much confidence in the "pwned password" search.
I know one of the weak password I stupidly reuse everywhere was compromised since I had someone buy something with my paypal account. But it comes up as clean in the password search. So it was probably cracked from one of the leaked hashes but the plain text was never entered into the public dumps.
Re:The 773M Record “Collection #1” Data Breach
by M2Ys4U on Thursday January 17, 2019 @12:36PM
(#18932716)
Well one can't prove a negative, that is that your password _hasn't_ been leaked.
Knowing that - for sure - a password has appeared in a breach is very useful.
Re:The 773M Record “Collection #1” Data Breach
by 113 on Friday January 18, 2019 @05:36AM
(#18938374)
It would be impossible for the site to have every password ever compromised.
It can only check against a database of known password leaks.
Re:The 773M Record “Collection #1” Data Breach
by ehsankia on Thursday January 17, 2019 @02:17AM
(#18928991)
There wouldn't be any inconvenience if your password manager did its job of helping you manage your passwords. 1Password has implemented a feature that helps you easily check all your passwords, I'm honestly surprised it's taking so long for the others to do too. The data is there, there's a super easy API, it doesn't take that much effort...
If I was him I'd do the same. HIBP is a side project of his and I wouldn't be able to sleep at night knowing I have the responsibility of securing billions of email & password combinations.
At the risk of the breach of those accounts adding fuel to the credential stuffing fire and reducing his overall credibility when providing security advice which is his primary occupation.
Too risky.