4 ms·
No way for me to verify it because I use different username on different sites, and I have a self-hosted catch-all email server, I would have to extract all my
by akerro 9y ago
No way for me to verify it because I use different username on different sites, and I have a self-hosted catch-all email server, I would have to extract all my usernames or emails from KeePass and check each of them separately... I'm too safe to even know I was hacked.
- PuffinBlue 9y agoThat might be even more interesting actually. Seeing as you could identify the exact site that was breached. That sort of data would actually be quite valuable to this project I would surmise. I also have a similar system now as you do, but really only for higher value accounts, not the niff naff forums stuff. And like you it's all randomly generated unique passwords so pretty safe. None of my site specific emails have been breached yet, which is good as that would mean a major global provider had been breached.
- akerro 9y ago> That might be even more interesting actually. Seeing as you could identify the exact site that was breached. That sort of data would actually be quite valuable to this project I would surmise. That's why I do it.
- icebraining 9y agoThe project seems to know where the data comes from, at least in my case it identified each: Email Pwned sites dropbox@... Dropbox ffshrine@... Final Fantasy Shrine github@... GeekedIn linkedin@... LinkedIn patreon@... Patreon tumblr@... tumblr (The Github one was using their OAuth - which kinda screws with the traceability)
- wrboyce 9y agoUnless you're using unique domains, you could use the HIBP domain-wide checker at https://haveibeenpwned.com/DomainSearch https://haveibeenpwned.com/DomainSearch.
- mstade 9y agoI have a setup where I have unique emails for each site I register with, but they are all under a specific domain. I was wondering how I could make use of HIBP and this helps immensely – thank you for sharing!
- jrimbault 9y agoI think that's what you want: https://haveibeenpwned.com/DomainSearch https://haveibeenpwned.com/DomainSearch
- PuffinBlue 9y agoI just checked my own domain and there are three addresses pwned that I don't use and never created. I've had the domain for years too. Probably someone just making up an address randomly but three times is a bit odd.
- deleted 9y ago[deleted]