91–100 of 104 posts
If you've entered your real password(s) there, you've already failed the test.
Also a whois on that domain doesn't even return a person's information, some proxied info only (might be scared of law enforcement since he might have the hacked DB data, but even so, if I didn't trust it, I trust it even less now).
Terrible interface. I entered "password" and it told me "It looks like your passwords may be safe. No instances of compromise are recorded in this database. However, it's good practice to change your critical passwords regularly and ensure they are not re-used across multiple sites." Why did I not enter an e-mail address like the light text in the input box says? Well, I let myself mislead by the header image.
You know it clearly says to enter your email address in the input field, right? Of course "password" hasn't shown up in the database…it's not an email address.
So why should I trust someone who asks me to type my password into a random site? Just because he/she says they will not save it? If you've entered your real password(s) there, you've already failed the test. Also a whois on that domain doesn't even return a person's information, some proxied info only (might be scared of law enforcement since he might have the hacked DB data, but even so, if I didn't trust it, I tru…
So why should I trust someone who asks me to type my password into a random site? Just because he/she says they will not save it? If you've entered your real password(s) there, you've already failed the test. Also a whois on that domain doesn't even return a person's information, some proxied info only (might be scared of law enforcement since he might have the hacked DB data, but even so, if I didn't trust it, I tru…
You enter your email address, not your password.
Earlier quoted context omitted.
What he means is this: you subscribe by telling the site your email. Then, if they ever find your email in one of the publicly released documents, then they will notify you by email.
What if your email is the account being compromised?
Earlier quoted context omitted.
I still don't understand. Why?
The OP comment was: "It'd be cool if they added an option to subscribe for $10/year for a quick SMS and email notification if your account is compromised. I'd get it for myself and my family." To enable this - you are giving your email, password, Payment details and Cell Phone number. The site as it stands today doesn't ask for any of this -- but if they were to take payments and do SMS notification they would.
Earlier quoted context omitted.
You know it clearly says to enter your email address in the input field, right? Of course "password" hasn't shown up in the database…it's not an email address.
It's not clear at all. The only information that you should provide your email is that placeholder, which on my monitor is barely visible. The name and information is very misleading. Seriously, i think many people will enter their passwords there (at least those type of people who don't know they shouldn't provide passwords anywhere ).
Please tell me I didn't just accidentally give my email to a Spam list.
Earlier quoted context omitted.
I think the site is referring to some service/site that got hacked recently and that you signed up for with the first-name@[domain].com email adress and not to the email account itself.
Then it makes it COMPLETELY useless information. You know how many thousands of sites I used various email addresses on, clearly everyone else is the same. It should tell you which sites were compromised such that you can ID if you used your email at any of said sites. Just saying ambiguously that there was a site which may have been compromised out of the 2 billion sites online is laughable.
In fact, I would say that prompting the average person to change some passwords either way, is a good thing.