Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Should I Change My Password?

shouldichangemypassword.com

Post reply on HN
Print view View original

61–70 of 104 posts

Re: Should I Change My Password?

#61

Post by lmz »

drivebyacct2 wrote: post #4
user9756 wrote: post #2

Am I the only one that feels uncomfortable with these kind of sites? Anyway, I tried "abc124" and received: "It looks like your passwords may be safe. No instances of compromise are recorded in this database. However, it's good practice to change your critical passwords regularly and ensure they are not re-used across multiple sites."

You're supposed to enter your email address... lol. There's a reason the text box says "Enter email here" and the bottom of the page discussed the "email entered will not be...". Also, it just doesn't make any sense to search by password. Yes, I would be disturbed if a public site was reversing weak poor choices in hash algorithm and publishing data about the resulting passwords.

However, a "should I change my password site" that takes passwords as an input would be pretty simple, just save the entered password and then say "YES".

Re: Should I Change My Password?

#62

Post by AltIvan »

chops wrote: post #37
bryanalves wrote: post #15

Can't this entire site be replaced with: YES

That's what I half expected the page to be, much like http://hasthelargehadroncolliderdestroyedtheworldyet.com

That silly page have 6 of Pagerank... and i have years trying to get some of mine out of zero!

Re: Should I Change My Password?

#64

Post by notatoad »

sbierwagen wrote: post #53
jacobolus wrote: post #38

Earlier quoted context omitted.

The title tag is required, though (unless you’re in an iframe), and an h1 tag must be closed (unlike, e.g., paragraph and list item tags). So your minimal page looks like: YES YES

Really? http://validator.w3.org/check?uri=http%3A%2F%2Funitinu.net%2... http://validator.w3.org/check?uri=http%3A%2F%2Funitinu.net%2... http://validator.w3.org/check?uri=http%3A%2F%2Funitinu.net%2... Dang, apparently so. Guess I was wrong. The world's most inane objection: If you force the validator to HTML5 mode, (as in the first and second links) then you don't need to declare a DOCTYPE, a savings of 16 bytes. Not…

forcing the validator to HTML5 mode would imply the doctype, wouldn't it, as the only way to force a browser to HTML5 mode is to include a doctype.

Re: Should I Change My Password?

#65

Post by mscarborough »

VMG wrote: post #3

The site should treat @gmail.com and @googlemail.com as equal. I found my leaked MtGox mail address for one variant but not the other.

Or instead of checking by email domains of individual accounts, add an option to search by the domain of the site you are concerned about.

Re: Should I Change My Password?

#66

Post by phlux »

growt wrote: post #26
phlux wrote: post #17

so, can someone answer this for me? I have a personal domain on google apps. The login ID is different than the email address I use/advertise. e.g. my username for login is first-initial+last-name@[domain].com But the email address I use for everything on that account is first-name@[domain].com This service states that my account was compromised on 12/12/2010 most recently at the first-name@[domain].com though you co…

I think the site is referring to some service/site that got hacked recently and that you signed up for with the first-name@[domain].com email adress and not to the email account itself.

Then it makes it COMPLETELY useless information. You know how many thousands of sites I used various email addresses on, clearly everyone else is the same.

It should tell you which sites were compromised such that you can ID if you used your email at any of said sites.

Just saying ambiguously that there was a site which may have been compromised out of the 2 billion sites online is laughable.

Re: Should I Change My Password?

#67

Post by maratd »

mjschultz wrote: post #57
josegonzalez wrote: post #54

Earlier quoted context omitted.

"Here is the password I use for potentially important information, and here is the email and phone number that would likely be associated with that password. Let me know when your database get's hacked so that way I can change my password and we can do this exercise again." Something like that you mean?

You don't need to give them your password or phone number, just the email address associated with your account(s). Adding a phone number would be optional.

You don't get it. If your account shows up in their database, then they'll have your email + password + phone number + any other data you provided.

Re: Should I Change My Password?

#68

Post by tlrobinson »

maratd wrote: post #67
mjschultz wrote: post #57

Earlier quoted context omitted.

You don't need to give them your password or phone number, just the email address associated with your account(s). Adding a phone number would be optional.

You don't get it. If your account shows up in their database, then they'll have your email + password + phone number + any other data you provided.

Huh? You don't need to give them anything except for your email address. They only look for your email address in the compromised databases.

Re: Should I Change My Password?

#69

Post by HN_Addict »

yaix wrote: post #60
chops wrote: post #37

Earlier quoted context omitted.

That's what I half expected the page to be, much like http://hasthelargehadroncolliderdestroyedtheworldyet.com

Lol. And if it does, the page will be updated to "Yes.", right?

Close - It will update to "Yup." The source code reads:

    if (!(typeof worldHasEnded == "undefined")) {
        document.write("YUP.");
    } else {
        document.write("NOPE.");
    }
And, it even comes with a warranty:

>

Post reply on HN