5 ms·
The lookup doesn't tell you anything more than someone exists in a breech. You'd still have to have the data itself. If you have the data itself, then lookup i
by techrat 5y ago
The lookup doesn't tell you anything more than someone exists in a breech. You'd still have to have the data itself.
If you have the data itself, then lookup is as simple as 'grep' or 'ctrl-f'
So anyone who has the means to compromise someone they're looking up by having the data doesn't need the HaveIBeenPwned tool in the first place.
Moot point, IMHO.
- 55555 5y agowhat if I use HIBP to check if any of my friends had registered accounts on a Furry Findom forum, which was recently breached? It's potentially embarrassing.
- techrat 5y agoI'd argue reasonably smart people would use a different, non distributed/shared email address for sensitive things like fetish sites... ...and that your friends deserve a better friend than someone who would look up their email addresses to embarrass them.
- MrGilbert 5y agoThis breach would be marked as ”sensitive“, so you wouldn't be able to look that up without confirmation of ownership.
- unholiness 5y agoYou can't, because that specific breach has been marked as sensitive: https://haveibeenpwned.com/FAQs#SensitiveBreach https://haveibeenpwned.com/FAQs#SensitiveBreach