7 ms·
Disclaimer: Firefox Monitor dev here. Note: We just released a "V2" of the site that allows you to add multiple email addresses to monitor, and (then) to have
by groovecoder 7y ago
Disclaimer: Firefox Monitor dev here.
Note: We just released a "V2" of the site that allows you to add multiple email addresses to monitor, and (then) to have all your breach alerts sent to your single primary email address.
- athorax 7y agoNice work! Small suggestion -- it would be nice to be able to to have the notification sent to the breached email and the primary email
- groovecoder 7y agoGood idea. File it here? https://github.com/mozilla/blurts-server/issues https://github.com/mozilla/blurts-server/issues
- mikaelmello 7y agoAre there plans to monitor an entire custom domain?
- programbreeding 7y agoI would love this as well. I use website-im-on@mydomain.com for every login. Being able to monitor my entire custom domain would be great. I assume it would require some sort of DNS verification or something.
- Fogest 7y agoJust use the site where Firefox is getting their data from, they have a domain feature: https://haveibeenpwned.com/DomainSearch https://haveibeenpwned.com/DomainSearch
- mothsonasloth 7y agoOh the irony if my email becomes breached for using Mozilla's service. In all seriousness I have faith in you guys for the most part (storing my bookmarks and sharing the browsing sessions across browsers).
- U8dcN7vx 7y agoThe sync data is said to be locally en/de-crypted. The same couldn't be true of the monitored addresses - a hash might be possible but then the alert wouldn't be certain merely probable and couldn't be reasonably sent.
- Fins 7y agoJust signed up, and it send breach notifications to individual emails, not the main one... Still, great job!
- groovecoder 7y agoYour initial report emails will always go to the affected email addresses. But future breach alerts will be sent to the Primary address. (If you select that in your preferences.)
- Fins 7y agoAh, OK. I expected that if I add a new address when already having the preference set for sending notices to the main one, they would go to the main one.
- dmix 7y agoDoes the email detector ignore dots in Gmail addresses? I was able to add my first.m.last@gmail.com and firstmlast@gmail.com as separate emails. I know that might complicate your detection system, it just might miss some breaches for people who use both.
- EastSmith 7y agoLooks nice, thanks. Why do I need a Firefox account to monitor my email?
- wDcBKgt66V8WDs 7y agoWould it be possible to handle email addresses with the + trick? E.g. you can supply your email address as foo+bar@<domain> and mail sent to that address will be routed to foo@<domain> by some providers like gmail and protonmail. But then that means enumerating every + address you use (I almost exclusively do this). Thoughts? I know this came up in a HIBP forum and I think Troy Hunt took the position of too much work for 0.1% of users, many of whom are likely technical enough to use a password manager and do this enumeration if they wanted.
- remir 7y agoAre there any plans of including Monitor directly into the browser?
- TeMPOraL 7y agoUI/UX complaint: on some breaches for one of my e-mails, I see entries saying "Compromised data: passwords". It's only slightly useful and makes me spend time searching reading the details. "Plaintext passwords" != "Unsalted password hashes" != "Salted password hashes". The qualifiers here would be immensely useful. Also, what's with the cards here? I can't select any of the text on them.
- Vinnl 7y agoIs there a place to report bugs? If not: I added an email address to monitor, and the verification email said: > We sent this message to $userEmail because the email address opted into alerts from Firefox Monitor. Note the `$userEmail`.