Also: https://shouldichangemypassword.com/
I tried "hello" and "god" and both are safe, apparently.
use your email address.
The best site to find password leaks: Google
11–20 of 44 posts
Re: The best site to find password leaks: Google
#12Google hacking is truly awesome and powerful. In fact there is some pro material already on the web such as http://johnny.ihackstuff.com/ghdb/
There is also a pretty good book from a spanish Microsoft MVP (yeah it sounds bad but still its an important award, :\)
http://www.informatica64.com/libros.aspx?id=hackingBuscadore...
It's a shame they decided not to translate it, anyone is up to it here? It contains everything that you'd ever wonder and much more.
Re: The best site to find password leaks: Google
#13Johnny (& others) have been doing this type of thing for years. The classic collection is here: http://johnny.ihackstuff.com/ghdb/
[deleted]
Re: The best site to find password leaks: Google
#14Also: https://shouldichangemypassword.com/
I tried "hello" and "god" and both are safe, apparently.
This keeps reminding me of that Daily WTF article where a sysadmin sends a warning about phishing spam with an example of one and gets hundreds of UN/PW pairs back... I think email should be taught is school.
Re: The best site to find password leaks: Google
#15Similar, and interesting in the context of LulzSec releases, is @PastebinLeaks on Twitter. It scans Pastebin for a variety of things (mail address lists, PGP keys, SQL dumps, and router configuration files have all popped up so far). They're not 100% - especially the mail/password dump detection - but it's definitely catching stuff. http://twitter.com/#!/PastebinLeaks
These kind of tools cause more harm than good.
Re: The best site to find password leaks: Google
#16hi
Re: The best site to find password leaks: Google
#17How does this actually happen though? Is this simply a case of people leaving the standard "apache index page" turned on or do this many people actually publish links to their SQL files someone crawlable?
Re: The best site to find password leaks: Google
#18i just created a google alert for my email + "filetype:sql". http://www.google.com/alerts - might as well make this work for me...
Re: The best site to find password leaks: Google
#19it nice how a screenshot from a groupon post made it into a new thread on HN
see the on at http://news.ycombinator.com/item?id=2704359
Re: The best site to find password leaks: Google
#20Similar, and interesting in the context of LulzSec releases, is @PastebinLeaks on Twitter. It scans Pastebin for a variety of things (mail address lists, PGP keys, SQL dumps, and router configuration files have all popped up so far). They're not 100% - especially the mail/password dump detection - but it's definitely catching stuff. http://twitter.com/#!/PastebinLeaks
These kind of tools cause more harm than good.
That's balderdash. These kinds of tools raise awareness of the issue, hopefully making more people think twice about posting private data to a public place. If they continue to be unaware of the danger of doing so, then it is simply exploited silently and everyone wonders how it happened.
Your statement assumes that security through obscurity is a good thing.