4 ms·

Firefox Monitor

remram 3y ago
> Breach data provided by ⁨Have I Been Pwned⁩ So it's exactly the same as https://haveibeenpwned.com/ https://haveibeenpwned.com/, except instead of giving hibp your email, you have to create a "Firefox Account". I guess it comes down to whose 4000-word terms of service you like better.
extraduder_ire 3y ago
This same breach info shows up if you open up firefox's password manager (about:logins) and have a saved account. It's a little less useful, since it won't shoot an email your way. But it's super handy to have a list of accounts/passwords/sites you need to change.
ChrisArchitect 3y ago
(2018) What's new here
WhereIsTheTruth 3y ago
This kind of data shouldn't be accessible by people who do not own the email address..
- IdiranVibe 3y ago
  People who create/release dumps that these tools check tend not to be too focused on account security....
  - WhereIsTheTruth 3y ago
    C'mon, there is a difference between breaching into servers and leaking/selling people's data and intentionally making all of that public and accessible through a public API Give me your email address and I can know your name + address + phone number + history of old passwords + browsing history and more personal data But who am I to care about that kind of things, screw people right
    - Eldt 3y ago
      Yeah let's give the bad guys all the ease of use while we put up obstacles for legitimate users
      - WhereIsTheTruth 3y ago
        You misunderstood, I'm not against this service, I'm against making the data available to people who do not own the email address, big difference that people don't seem to understand over here Wich explain the lack of care for privacy and security in the west, boy 2024 will be fun.. Privacy washing is a thing apparently
- remram 3y ago
  Why? Also HIBP has a "domain search" for sysadmins: https://haveibeenpwned.com/DomainSearch https://haveibeenpwned.com/DomainSearch If you just want to check if the passwords of users of your service have been breached, there is a separate API for that: https://haveibeenpwned.com/API/v3#SearchingPwnedPasswordsByRange https://haveibeenpwned.com/API/v3#SearchingPwnedPasswordsByR...

> Breach data provided by ⁨Have I Been Pwned⁩ So it's exactly the same as https://haveibeenpwned.com/ https://haveibeenpwned.com/, except instead of giving hibp your email, you have to create a "Firefox Account". I guess it comes down to whose 4000-word terms of service you like better.

extraduder_ire 3y ago

This same breach info shows up if you open up firefox's password manager (about:logins) and have a saved account. It's a little less useful, since it won't shoot an email your way. But it's super handy to have a list of accounts/passwords/sites you need to change.

ChrisArchitect 3y ago

(2018) What's new here

WhereIsTheTruth 3y ago

This kind of data shouldn't be accessible by people who do not own the email address..

IdiranVibe 3y ago
People who create/release dumps that these tools check tend not to be too focused on account security....
- WhereIsTheTruth 3y ago
  C'mon, there is a difference between breaching into servers and leaking/selling people's data and intentionally making all of that public and accessible through a public API Give me your email address and I can know your name + address + phone number + history of old passwords + browsing history and more personal data But who am I to care about that kind of things, screw people right
  - Eldt 3y ago
    Yeah let's give the bad guys all the ease of use while we put up obstacles for legitimate users
    - WhereIsTheTruth 3y ago
      You misunderstood, I'm not against this service, I'm against making the data available to people who do not own the email address, big difference that people don't seem to understand over here Wich explain the lack of care for privacy and security in the west, boy 2024 will be fun.. Privacy washing is a thing apparently
remram 3y ago
Why? Also HIBP has a "domain search" for sysadmins: https://haveibeenpwned.com/DomainSearch https://haveibeenpwned.com/DomainSearch If you just want to check if the passwords of users of your service have been breached, there is a separate API for that: https://haveibeenpwned.com/API/v3#SearchingPwnedPasswordsByRange https://haveibeenpwned.com/API/v3#SearchingPwnedPasswordsByR...