That is an incredible thought, I think it would have to be done independently though.
For what it's worth, I maintained a crypto canary in LP and it hasn't moved yet. I do think it's worth keeping a canary wallet with some small amount of crypto in any password manager. Although it probably wouldn't be effective to detect targeted attacks, crypto wallets are probably very effective for widespread/untargeted attacks.
Re:Canary Tokens
by AdmiralAsshat on Saturday December 31, 2022 @12:04AM
(#34193757)
Do keep us posted if it changes!
Re:Canary Tokens
by Eisenstein on Saturday December 31, 2022 @01:30AM
(#34194202)
Let's do it. I just bought carnarychecker.com
Any devs want to volunteer? I don't know shit about how to make it work.
carnarychecker.com or canarychecker.com? (I'm only being nitpicky since it seems like an important detail in this case :-P )
Re:Canary Tokens
by Eisenstein on Saturday December 31, 2022 @03:02AM
(#34194564)
Double checked, thanks for pointing out the typo, but I registered the correct one (phew):
Domain - canarychecker.com 1 year registration $12.00
I'm not entirely sure, but it seems like parsing the apache/nginx/other webserver access log is enough. When you detect request to some token ID, get email associated with it and send notification pre-recorded by the user.
Re:Canary Tokens
by Eisenstein on Sunday January 01, 2023 @05:54AM
(#34205341)
If this is something you are willing to work on, send me an email, it is in my profile.
In light of the LastPass breach, it seems like it would be useful if someone had created a few LastPass vaults and seeded them with some canary tokens (and probably canary crypto wallets), so if any of those tokens or wallets were used, it would almost certainly indicate that attackers had breached LastPass and successfully cracked vault passwords.