4 ms·
I believe there's a new section of the site where you can enter the password and see if it's been pwned, it should've been updated to include this latest dump.
by mkane848 9y ago
I believe there's a new section of the site where you can enter the password and see if it's been pwned, it should've been updated to include this latest dump.
- juice_bus 9y agothat... seems like a bad idea.
- edgartaor 9y agoYes, just intercept the connection or some phishing server and you are really pwned.
- wila 9y agoIf that https connection can be intercepted, you might have more to worry about. Btw this is the page: https://haveibeenpwned.com/Passwords https://haveibeenpwned.com/Passwords and before you complain, at least read Troy's article where he introduces this service. https://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/ https://www.troyhunt.com/introducing-306-million-freely-down...
- StavrosK 9y agoOh wow, what? Why would anyone encourage this? The data is out there, it's a public dataset, just show me the password or a hash of it or something.
- carbocation 9y agoThe site does say "Do not send any password you actively use to a third-party service - even this one!"
- carbocation 9y agoI think what he's getting at is whether there is a place where he can look up whether his email, in combination with a password, was leaked.