4 ms·
If the use case is only checking YOUR OWN email address, then why not require a verification of the email before providing the results? E.g. you enter your emai
by kozak 9y ago
If the use case is only checking YOUR OWN email address, then why not require a verification of the email before providing the results? E.g. you enter your email and get a results link sent to this same email address. Because now HIPB appears to be an interesting OSINT tool for gathering information about people, specifically for finding out what "shady" services did they ever register at.
- Siecje 9y agoYou need to register to see the leaks from "shady" services.
- deleted 9y ago[deleted]
- kozak 9y agoShadyness is relative. I felt quite ashamed of having an account on some of those sites that HIBP considers "non-shady".
- Ajedi32 9y agoIf someone has your email address, it's often not very hard for them to determine whether or not you have an account on a particular site. (Try to register with that email, and if the sign-up form complains, then you probably do have an account there.) That said, if you're still concerned there's always https://haveibeenpwned.com/OptOut https://haveibeenpwned.com/OptOut
- kozak 9y agoThere is a big difference between checking every service one by one and scanning them all at once. OptOut is indeed what I needed, thank you for the idea.
- drdaeman 9y agoWould be neat if one can opt-out a domain. I.e. I have a domain that's essentially a catch-all for signing up with per-site unique emails.
- mi100hael 9y agoCan't hurt to send Troy an email. Probably would be a useful feature for companies, too. Could be achieved relatively easily w/ DNS validation.