3 ms·
When it mentions that your password has been leaked for a service, is this the plain text pwd (that service somehow stored that way) or is it a hash? Was the we
by santiagobasulto 1y ago
When it mentions that your password has been leaked for a service, is this the plain text pwd (that service somehow stored that way) or is it a hash? Was the website salting the passwords (so no rainbow-table attack could happen)? What key derivation function were they using? Etc...
I feel the red circle with "Password compromised" is way too simplistic if this wants to be a TRUE trusty site regarding cybersecurity. If they just want to show fear and sell 1Password ads, I understand it, I won't consult it anymore. But if they want to really step up their game from a technical perspective, they should include more details.
- fckgw 1y agoEvery detailed blurb on the breach that I've seen says "Passwords stored as" and lets you know how they were encrypted.
- slumberlust 1y agoI'm not convinced the target audience is infosec. I've leveraged this site a few times to show family members the pervasiveness of breaches and to recommend pw managers. If a tool like this can help a few people increase their posture then I consider it a success.