Should I Change My Password?

#1

Post by jamesjyu » Thu, Jun 23, 2011, 5:04 PM UTC

Should I Change My Password?
shouldichangemypassword.com

Re: Should I Change My Password?

#2

Post by user9756 » Thu, Jun 23, 2011, 5:14 PM UTC

Am I the only one that feels uncomfortable with these kind of sites?

Anyway, I tried "abc124" and received: "It looks like your passwords may be safe. No instances of compromise are recorded in this database. However, it's good practice to change your critical passwords regularly and ensure they are not re-used across multiple sites."

Re: Should I Change My Password?

#3

Post by VMG » Thu, Jun 23, 2011, 5:25 PM UTC

The site should treat @gmail.com and @googlemail.com as equal. I found my leaked MtGox mail address for one variant but not the other.

Re: Should I Change My Password?

#4

Post by drivebyacct2 » Thu, Jun 23, 2011, 5:40 PM UTC

user9756 wrote: post #2

Am I the only one that feels uncomfortable with these kind of sites? Anyway, I tried "abc124" and received: "It looks like your passwords may be safe. No instances of compromise are recorded in this database. However, it's good practice to change your critical passwords regularly and ensure they are not re-used across multiple sites."

You're supposed to enter your email address... lol. There's a reason the text box says "Enter email here" and the bottom of the page discussed the "email entered will not be...". Also, it just doesn't make any sense to search by password.

Yes, I would be disturbed if a public site was reversing weak poor choices in hash algorithm and publishing data about the resulting passwords.

Re: Should I Change My Password?

#5

Post by haentz » Thu, Jun 23, 2011, 5:44 PM UTC

Would be nice to see where the email was leaked from…

Re: Should I Change My Password?

#6

Post by ch0wn » Thu, Jun 23, 2011, 5:47 PM UTC

VMG wrote: post #3

The site should treat @gmail.com and @googlemail.com as equal. I found my leaked MtGox mail address for one variant but not the other.

username+randomstring@g[oogle]mail.com should be normalized to username@gmail.com, as well. I used a custom extension for MtGox that wasn't found.

That said, really useful service. On the other hand it's sad that we actually need something like this.

Re: Should I Change My Password?

#7

Post by wccrawford » Thu, Jun 23, 2011, 5:50 PM UTC

Here, let me save you some time:

If you're asking, then YES. You should change your password.

Edit: I get what this is doing, and it's a neat idea... But the answer is still always YES if you ask that question.

Re: Should I Change My Password?

#8

Post by [deleted] » Thu, Jun 23, 2011, 6:05 PM UTC

[deleted]

Re: Should I Change My Password?

#9

Post by Kwpolska » Thu, Jun 23, 2011, 6:06 PM UTC

Useful, even if I thought I'd see a big-ass "YES" and nothing else.

Re: Should I Change My Password?

#10

Post by pavel_lishin » Thu, Jun 23, 2011, 6:15 PM UTC

ch0wn wrote: post #6

VMG wrote: post #3

The site should treat @gmail.com and @googlemail.com as equal. I found my leaked MtGox mail address for one variant but not the other.

username+randomstring@g[oogle]mail.com should be normalized to username@gmail.com, as well. I used a custom extension for MtGox that wasn't found. That said, really useful service. On the other hand it's sad that we actually need something like this.

The other way around, too. If I put in "pavel.lishin@gmail.com", it would be nice if it informed me that "pavel.lishin+iharvestbitcoinsalldumbday@gmail.com" was compromised.