3 ms·
it would be interesting if someone created a "Have I Been Pwned" service for these types of leaks, does anyone know if one exists?
by fosco 8y ago
it would be interesting if someone created a "Have I Been Pwned" service for these types of leaks, does anyone know if one exists?
- jgroszko 8y agoBetween Equifax and today Exactis both leaking 300M+ records it's not really a question of if, but rather how many times have I been pwned...
- Bartweiss 8y agoAs of now, there are 3 major data leak stories on the HN front page at the same time. Passwords can at least be changed, but data leaks are basically entropic; there's no way to reverse the damage. I don't want to stop holding leak sources accountable for what they lose, but from a personal viewpoint I'm now more interested in mitigation than prevention...
- rhizome 8y agoI don't want to stop holding leak sources accountable for what they lose Where is this happening? I'm not aware of any company being prosecuted (or even penalized in any significant way) for releasing data.
- Bartweiss 8y agoI meant socially, as a tech community - I'm wondering how to strike a balance between "realistically, your information will get leaked, plan accordingly" and "but that doesn't make it okay". Legally, or even on a consumer level, I don't see any kind of meaningful consequence. And the rate of data loss probably won't go down until that changes.
- geofft 8y agoHave I Been Pwned already considers data breaches in scope - it surprised me a bit that it reported things where my password wasn't at risk at all but my data was leaked and there was nothing I could do about it. (In particular there was one breach of data scraped from publicly available data from GitHub, where there was neither anything I could do about it nor anything I wanted to do about it.) I think it's still keyed on email address though.