5 ms·

This gives me a thought: is there any service out there that creates and monitors canary tokens on a larger scale to try to identify when specific providers hav

This gives me a thought: is there any service out there that creates and monitors canary tokens on a larger scale to try to identify when specific providers have been breached? In light of the LastPass breach, it seems like it would be useful if someone had created a few LastPass vaults and seeded them with some canary tokens (and probably canary crypto wallets), so if any of those tokens or wallets were used, it would almost certainly indicate that attackers had breached LastPass and successfully cracked vault passwords.

burnished 4y ago
That is an incredible thought, I think it would have to be done independently though.
kfichter 4y ago
For what it's worth, I maintained a crypto canary in LP and it hasn't moved yet. I do think it's worth keeping a canary wallet with some small amount of crypto in any password manager. Although it probably wouldn't be effective to detect targeted attacks, crypto wallets are probably very effective for widespread/untargeted attacks.
- AdmiralAsshat 4y ago
  Do keep us posted if it changes!
- deleted 4y ago
  [deleted]
Eisenstein 4y ago
Let's do it. I just bought carnarychecker.com Any devs want to volunteer? I don't know shit about how to make it work. EDIT: If anyone wants it and promises to do something like the post above suggested I will transfer the domain, I really did buy it. EDIT 2: canarychecker.com is the one I registered.
- BalinKing 4y ago
  carnarychecker.com or canarychecker.com? (I'm only being nitpicky since it seems like an important detail in this case :-P )
  - Eisenstein 4y ago
    Double checked, thanks for pointing out the typo, but I registered the correct one (phew): Domain - canarychecker.com 1 year registration $12.00
- IYasha 4y ago
  I'm not entirely sure, but it seems like parsing the apache/nginx/other webserver access log is enough. When you detect request to some token ID, get email associated with it and send notification pre-recorded by the user.
  - Eisenstein 4y ago
    If this is something you are willing to work on, send me an email, it is in my profile.

burnished 4y ago

That is an incredible thought, I think it would have to be done independently though.

kfichter 4y ago

For what it's worth, I maintained a crypto canary in LP and it hasn't moved yet. I do think it's worth keeping a canary wallet with some small amount of crypto in any password manager. Although it probably wouldn't be effective to detect targeted attacks, crypto wallets are probably very effective for widespread/untargeted attacks.

AdmiralAsshat 4y ago
Do keep us posted if it changes!
deleted 4y ago
[deleted]

Eisenstein 4y ago

Let's do it. I just bought carnarychecker.com Any devs want to volunteer? I don't know shit about how to make it work. EDIT: If anyone wants it and promises to do something like the post above suggested I will transfer the domain, I really did buy it. EDIT 2: canarychecker.com is the one I registered.

BalinKing 4y ago
carnarychecker.com or canarychecker.com? (I'm only being nitpicky since it seems like an important detail in this case :-P )
- Eisenstein 4y ago
  Double checked, thanks for pointing out the typo, but I registered the correct one (phew): Domain - canarychecker.com 1 year registration $12.00
IYasha 4y ago
I'm not entirely sure, but it seems like parsing the apache/nginx/other webserver access log is enough. When you detect request to some token ID, get email associated with it and send notification pre-recorded by the user.
- Eisenstein 4y ago
  If this is something you are willing to work on, send me an email, it is in my profile.