4 ms·
Isn't the data whats important? Isn't the code just essentially a text input box that takes a string, hashes it, and runs it against hashed passwords in a data
by nickthemagicman 6y ago
Isn't the data whats important?
Isn't the code just essentially a text input box that takes a string, hashes it, and runs it against hashed passwords in a database?
- andruby 6y agoYes, and Troy mentions this in the comments of the blogpost. He's open-sourcing it so the community can help him manage the project, which I think is a fair request/hope.
- mooreds 6y agoYup. Gathering the data is a large part of the value he provides. I wrote an article about how to implement this, and data gathering tasks are crucial: https://fusionauth.io/learn/expert-advice/security/breached-password-detection https://fusionauth.io/learn/expert-advice/security/breached-... He touches on the non technical difficulties as well with his comment: "We invite parties to form their own views on the legality of the data." So the fact he's gathered it all lets HIBP be an service that other companies can use without worrying about the thorny legal question. But there's also his reputation as a steward of the system, which is valuable beyond the data itself. Anyway, while he didn't actually open source anything yet, I'm glad he's committing to it, as hopefully that will allow this internet resource to continue.