News for hackers. Stuff that matters.
Re:DarkBeam leaks billions of email and password combinations by lelanthran on Thursday September 28, 2023 @01:36AM (#37685635)
Each time a breach like this happens I want to download the file and check if

1. My emails are in the dataset, and

2. Any of my passwords are in that dataset.

I really just want the collection of passwords so that I can use it as a check against any of my current passwords

Re:DarkBeam leaks billions of email and password combinations by imposterr on Thursday September 28, 2023 @01:40AM (#37685656)
If you use any of the better password managers this feature exists and runs automatically. If you don't want to go that route, then you can make use of https://haveibeenpwned.com/
Re:DarkBeam leaks billions of email and password combinations by lelanthran on Thursday September 28, 2023 @03:23AM (#37686427)
Thank you, I've edited my comment to be more specified
Re:DarkBeam leaks billions of email and password combinations by slashtab on Thursday September 28, 2023 @08:36AM (#37688749)
I have a gmail account which google one shows, it along with a username has been leaked on dark web, but haveibeenpwned shows email was not found in any data breach. How is that possible?
Re:DarkBeam leaks billions of email and password combinations by michaelbuckbee on Thursday September 28, 2023 @08:41AM (#37688789)
They're using different data sources.
Re:DarkBeam leaks billions of email and password combinations by hnlmorg on Thursday September 28, 2023 @01:38AM (#37685646)
Services already exist that does this. Some password managers will check but the popular service often talked about on here is https://haveibeenpwned.com/
Re:DarkBeam leaks billions of email and password combinations by lelanthran on Thursday September 28, 2023 @03:23AM (#37686428)
Thank you, I've edited my comment to be more specified
Re:DarkBeam leaks billions of email and password combinations by GoblinSlayer on Thursday September 28, 2023 @03:49AM (#37686589)
They used to publish a torrent with hashes, but then went full SaaS.
Re:DarkBeam leaks billions of email and password combinations by hnlmorg on Thursday September 28, 2023 @06:57AM (#37687827)
Download Have I Been Pwnds dataset then: https://github.com/HaveIBeenPwned/PwnedPasswordsDownloader
Re:DarkBeam leaks billions of email and password combinations by GarrickDrgn on Thursday September 28, 2023 @03:49AM (#37686590)
HIBP lets you download their hashed passwords DB to check against.

https://github.com/HaveIBeenPwned/PwnedPasswordsDownloader

Re:DarkBeam leaks billions of email and password combinations by m463 on Thursday September 28, 2023 @03:50AM (#37686594)
I agree - download all the passwords and don't single out what you're checkign for someone else to see.

I don't know why we can't use this kind of thing for better privacy everywhere.

A similar example (outside the realm of passwords) would be when checking for a software update. Instead of sending "i have software xyz version 1.2.3", just download a current list of software and check it locally against your software. Probably would be faster anyway to download a static dataset instead of hitting a remote database.

Re:DarkBeam leaks billions of email and password combinations by shapefrog on Thursday September 28, 2023 @06:37AM (#37687690)
Each time a breach like this happens I want to download the file and check if;

1. People on my s*t list are in the dataset, and

2. Any of their passwords are in that dataset.

Then I can use the information to make their lives miserable.