Live data from Hacker News

Should I Change My Password?

shouldichangemypassword.com

81–90 of 104 posts

Re: Should I Change My Password?

#81
post #73

Terrible interface. I entered "password" and it told me "It looks like your passwords may be safe. No instances of compromise are recorded in this database. However, it's good practice to change your critical passwords regularly and ensure they are not re-used across multiple sites." Why did I not enter an e-mail address like the light text in the input box says? Well, I let myself mislead by the header image.

You know it clearly says to enter your email address in the input field, right? Of course "password" hasn't shown up in the database…it's not an email address.

Yes, re-read my last sentence.

Re: Should I Change My Password?

#83
post #72
post #67

Earlier quoted context omitted.

You don't get it. If your account shows up in their database, then they'll have your email + password + phone number + any other data you provided.

What he means is this: you subscribe by telling the site your email. Then, if they ever find your email in one of the publicly released documents, then they will notify you by email.

What if your email is the account being compromised?

Re: Should I Change My Password?

#87

Earlier quoted context omitted.

Yes you do if you subscribe for notifications.

I still don't understand. Why?

The OP comment was: "It'd be cool if they added an option to subscribe for $10/year for a quick SMS and email notification if your account is compromised. I'd get it for myself and my family."

To enable this - you are giving your email, password, Payment details and Cell Phone number. The site as it stands today doesn't ask for any of this -- but if they were to take payments and do SMS notification they would.

Re: Should I Change My Password?

#88
post #60

Earlier quoted context omitted.

Lol. And if it does, the page will be updated to "Yes.", right?

Close - It will update to "Yup." The source code reads: if (!(typeof worldHasEnded == "undefined")) { document.write("YUP."); } else { document.write("NOPE."); } And, it even comes with a warranty: >

Very Steve Jobs-ish. Yup. Nope.

Re: Should I Change My Password?

#90

As a test, I took one of the email addresses from the list of Arizona law enforcement addresses that lulzsec just released ( http://lulzsecurity.com/releases/chinga_la_migra_1.txt ). ShouldIChange site reports no instances of compromised records in it's db.

EDIT - I just saw the sources page for the ShouldIChange site: https://shouldichangemypassword.com/sources.php
Post reply on HN