4 ms·
It looks like they're not doing this, but it is also possible to see if your exact password is in the breach using an algorithm called k-anonymity: https://blo
by jxcl 7y ago
It looks like they're not doing this, but it is also possible to see if your exact password is in the breach using an algorithm called k-anonymity:
https://blog.cloudflare.com/validating-leaked-passwords-with-k-anonymity/ https://blog.cloudflare.com/validating-leaked-passwords-with...
- lucideer 7y agoMozilla are using k-anonymity in their FirefoxMonitor service[0]. This feature syncs from FirefoxMonitor to a local browser DB and checks against that DB. However, I'm not 100% sure what data it syncs from FirefoxMonitor (obviously a subset, but I don't know how that's chosen. I'm not sure if they're using k-anon for requests between the Firefox browser and their own service). [0] https://github.com/mozilla/blurts-server/blob/master/hibp.js#L59 https://github.com/mozilla/blurts-server/blob/master/hibp.js...