Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Should I Change My Password?

shouldichangemypassword.com

Post reply on HN
Print view View original

11–20 of 104 posts

Re: Should I Change My Password?

#11

Post by spoold »

pavel_lishin wrote: post #10
ch0wn wrote: post #6

Earlier quoted context omitted.

username+randomstring@g[oogle]mail.com should be normalized to username@gmail.com, as well. I used a custom extension for MtGox that wasn't found. That said, really useful service. On the other hand it's sad that we actually need something like this.

The other way around, too. If I put in "pavel.lishin@gmail.com", it would be nice if it informed me that "pavel.lishin+iharvestbitcoinsalldumbday@gmail.com" was compromised.

And any variation with periods in the username: spoold@gmail.com == s.pool.d@gmail.com == spo.old@googlemail.com

Re: Should I Change My Password?

#13

Post by jacobr »

user9756 wrote: post #2

Am I the only one that feels uncomfortable with these kind of sites? Anyway, I tried "abc124" and received: "It looks like your passwords may be safe. No instances of compromise are recorded in this database. However, it's good practice to change your critical passwords regularly and ensure they are not re-used across multiple sites."

How many people would fall for it if it first asked for e-mail, said it was safe, and then "test your password too?"

Re: Should I Change My Password?

#16

Post by Scorponok »

My first thought was that this would have fields for me to enter my email address and password, under the pretense of "we will test your password to see if it's secure". Wonder how many people you could get with that...

Re: Should I Change My Password?

#17

Post by phlux »

so, can someone answer this for me?

I have a personal domain on google apps. The login ID is different than the email address I use/advertise.

e.g. my username for login is first-initial+last-name@[domain].com

But the email address I use for everything on that account is first-name@[domain].com

This service states that my account was compromised on 12/12/2010 most recently at the first-name@[domain].com though you could not login to my account with that email address...

So - how valid is such a check. Also - without it showing what information it is checking against, it feels really spammy. as if they are asking you to enter your email for a "check" knowing that you will enter a valid email - then they harvest the email as valid for spam.

Re: Should I Change My Password?

#19

Post by joezydeco »

phlux wrote: post #17

so, can someone answer this for me? I have a personal domain on google apps. The login ID is different than the email address I use/advertise. e.g. my username for login is first-initial+last-name@[domain].com But the email address I use for everything on that account is first-name@[domain].com This service states that my account was compromised on 12/12/2010 most recently at the first-name@[domain].com though you co…

I got the exact same date for my gApps-hosted domain. Odd.

Re: Should I Change My Password?

#20

Post by phlux »

jacobr wrote: post #13
user9756 wrote: post #2

Am I the only one that feels uncomfortable with these kind of sites? Anyway, I tried "abc124" and received: "It looks like your passwords may be safe. No instances of compromise are recorded in this database. However, it's good practice to change your critical passwords regularly and ensure they are not re-used across multiple sites."

How many people would fall for it if it first asked for e-mail, said it was safe, and then "test your password too?"

my passwrod, HUNTER2, is surely safe. I checked with some IT friends I met on IRC. Whenever I type my password, HUNTER2 - the rest of the world cant see it. So I am not worried.
Post reply on HN