3 ms·
Looks like this doesn't include another feature of HaveIBeenPwned. Its cracked password hash database. If you trust their JavaScript, you can type in your passw
by goda90 7y ago
Looks like this doesn't include another feature of HaveIBeenPwned. Its cracked password hash database. If you trust their JavaScript, you can type in your passwords and see if they are on the list. If you're a little more paranoid you can download the hashes and do your own search.
- kibwen 7y agoSince this service appears to be deliberately aimed at non-tech-savvy users, I get the impression that Mozilla is trying to not normalize the practice of submitting your passwords to third-party websites. It also nimbly sidesteps any questions of "why should I trust firefox.com with my password"; you don't need to, because you're not giving it to them.
- ZeroGravitas 7y agoMozilla have a password saving app, not checked but I wouldn't be surprised if that is a feature and may have inspired this collaboration.
- JeanMarcS 7y agoWell with the API it’s pretty easy to test your password. You just have to hash it, send the 5 first characters and it returns the list of the hashes starting with those 5 characters. You then just check.
- TremendousJudge 7y agoIt's easy if you know what you're doing. I don't think my mother could do this.
- JeanMarcS 7y agoYou are completely right, but I was answering to parent post. I don’t think your mother, or mine, can ask herself this question of trusting the JavaScript or not :-)
- groovecoder 7y agoDisclaimer: Monitor dev here ... Watch this space: https://github.com/mozilla/blurts-addon/issues/142 https://github.com/mozilla/blurts-addon/issues/142 ;)
- rhamzeh 7y agoThat repo is archived and read-only though. Is it still being actively developed elsewhere?