4 ms·

For example, if the names of the files included in the zip file may have been a domain name. From seeing the contents of these dumps before, files are often nam

by dpcx 9y ago

For example, if the names of the files included in the zip file may have been a domain name. From seeing the contents of these dumps before, files are often named in that manner. If they are, then I as the user can then determine where my account was breached. This of course is just one example, and not guaranteed to be an accurate one in this case.

kasey_junk 9y ago
Something more than the list at the bottom of the post?
- dpcx 9y ago
  Adblock caught that - apologies.
- rocqua 9y ago
  When an email comes up as compromised in this dump, it would be great if that notification came with the filename(s) in that list where the email was found.
  - zokier 9y ago
    Especially in this case I think including the filename would have been nice; manually going through list of 2.8k domains and trying to guess if you ever have happened to have an account there is no fun. Having the filename might also help verify the veracity of the information. I suppose the reason for omitting the filename is that Troy does not want to cast any unwarranted trust in the filenames, which is fair.
    - rocqua 9y ago
      My first guess was that by publishing the file-name, it is easier to link a compromised email to a password. I'd guess that, if you had access to the dumps, this functionality would be about a 10-20x speedup to lookups of the password belonging to an email. However, I think the real reason is privacy. If I recall correctly, there are certain breaches where HIBP redacts the website to protect privacy. A great example of this was ashleymadison. It kinda sucks when anyone that knows your email can learn you were on that site. It seems excessively hard to screen the entire list of 2800 items for such privacy concerns.
petee 9y ago
he publishes the list of domains in this article. I've already recognized one i had an account on, and was able to notify the owner - it looks like it might have been from a known 2016 hack

by dpcx 9y ago

kasey_junk 9y ago

Something more than the list at the bottom of the post?

dpcx 9y ago
Adblock caught that - apologies.
rocqua 9y ago
When an email comes up as compromised in this dump, it would be great if that notification came with the filename(s) in that list where the email was found.
- zokier 9y ago
  Especially in this case I think including the filename would have been nice; manually going through list of 2.8k domains and trying to guess if you ever have happened to have an account there is no fun. Having the filename might also help verify the veracity of the information. I suppose the reason for omitting the filename is that Troy does not want to cast any unwarranted trust in the filenames, which is fair.
  - rocqua 9y ago
    My first guess was that by publishing the file-name, it is easier to link a compromised email to a password. I'd guess that, if you had access to the dumps, this functionality would be about a 10-20x speedup to lookups of the password belonging to an email. However, I think the real reason is privacy. If I recall correctly, there are certain breaches where HIBP redacts the website to protect privacy. A great example of this was ashleymadison. It kinda sucks when anyone that knows your email can learn you were on that site. It seems excessively hard to screen the entire list of 2800 items for such privacy concerns.

petee 9y ago

he publishes the list of domains in this article. I've already recognized one i had an account on, and was able to notify the owner - it looks like it might have been from a known 2016 hack