News for hackers. Stuff that matters.

A comment on Have I been pwned? Check if you have an account that has been compromised. Parent comment

Re:Have I been pwned? Check if you have an account that has ... by wglb on Thursday September 11, 2014 @11:42AM (#8303215)
This simply has emails from other lists that have been floating around. For example, the adobe set is from the adobe breach where emails were in the clear.

The dark hat guys already have this list. And likely some passwords, which this site doesn't ask for.

[ Parent | on HN ]
Re:Have I been pwned? Check if you have an account that has ... by atwebb on Thursday September 11, 2014 @12:04PM (#8303361)
That's the point OP was making.

They would know that you know that they know.

This means they could be very, very targeted with an email/social phishing attack to try and get a newer password or other account information by referencing the previously compromised site. It could help the bad guys establish trust. A bit tinfoily but well within the realm of possibilities if the lookups on this site are logged.

[ Parent | on HN ]