3 ms·
It is worth noting the user awareness impact HaveIBeenPwned has had. On the other hand, I feel like SpyCloud does not get enough credit for having a dataset 30
by mike_d 3y ago
It is worth noting the user awareness impact HaveIBeenPwned has had.
On the other hand, I feel like SpyCloud does not get enough credit for having a dataset 30x bigger and working directly with companies to actually mitigate credential reuse. If you've ever been prompted at login to a major website or received an email asking you to reset a password because it was used in multiple places, there is a good chance SpyCloud is behind it.
- ziddoap 3y ago>On the other hand, I feel like SpyCloud does not get enough credit for having a dataset 30x bigger and working directly with companies to actually mitigate credential reuse Not sure if it is your intent, but this implies that HIBP does not work directly with companies to mitigate credential re-use. It does. Some examples would be their partnership with 1Password and other password managers, Firefox, their partnership with the FBI, UK & Australian governments, etc.
- mike_d 3y agoIt would be like comparing HN to Facebook, they are both technically operating social media sites but I don't think anyone would argue they are doing so at the same scale. HIBP ultimately is a hobby project that was really good at bringing the publics attention to the problem and booting Troy's social profile.
- ziddoap 3y agoHow many governments, password managers, web browsers, and law enforcement agencies does one need to be partnered with to transcend "hobby project" territory?
- sumedh 3y ago> transcend "hobby project" territory? What happens if Troy gets hit by a bus tomorrow?
- ziddoap 3y agoI think you are implying that the presence or lack of a continuity plan is what determines whether something is a hobby project or not. And I think that's an extremely silly way to determine if something is a hobby project or not.
- specto 3y agoHrm, a free service that helps millions of people vs a company that requires a subscription for any use. I don't think you're comparing apples to apples, and the latter is not useful at all for most people.
- PeterisP 3y agoI'd bet that SpyCloud has less customers than the number of people who have integrated Troy's free pwned password data to actually mitigate password reuse.