31–40 of 44 posts
It's a shame these companies are so cheap that they don't hire real developers.
Downmod me if you feel like, but I genuinely feel bad about HN after seeing this submission. edit: definitely downmod to make an example.
i just created a google alert for my email + "filetype:sql". http://www.google.com/alerts - might as well make this work for me...
This is a great idea. Unfortunately pastebin and sites like it are generally not indexed by google.
Earlier quoted context omitted.
These kind of tools cause more harm than good.
That's balderdash. These kinds of tools raise awareness of the issue, hopefully making more people think twice about posting private data to a public place. If they continue to be unaware of the danger of doing so, then it is simply exploited silently and everyone wonders how it happened. Your statement assumes that security through obscurity is a good thing.
Someone ought to write a tool that follows this account, and e-mails people warning them that their e-mail has been compromised.
The hard part would be explaining what happened, how to verify it, and how to fix it to random strangers without convincing them that you're the one who just tried to steal their life savings.
And even if its hashed, there's public databases resolving those: http://hashash.in/
Earlier quoted context omitted.
Private browsing isn't going to help with sites that publish their databases in plaintext, as in the link.
Your browsing history will show your passwords that you searched for to people who use your computer. Also, next time you google search when logged on your password might also show as a suggestion. Otherwise a password-not-yet-leaked will no longer be. If you didn't turn on private browsing as I suggested and are using Safari, type the password you searched for in your URL bar now and you will see why I said what I s…
And for that matter, why do you have so few that you can easily google for them instead of generating random ones per site?
(Fun fact, googling for your e-mail address reveals a hash of your password on MtGox.)
It's a shame these companies are so cheap that they don't hire real developers.
Also, it's not a matter of development, but security and system administration. They are often performed not only by different people, but sometimes even by different sub-organizations in different physical locations. It's not a good excuse, but we shouldn't be so quick to judge developers author knowing what exactly happened.
Earlier quoted context omitted.
Your browsing history will show your passwords that you searched for to people who use your computer. Also, next time you google search when logged on your password might also show as a suggestion. Otherwise a password-not-yet-leaked will no longer be. If you didn't turn on private browsing as I suggested and are using Safari, type the password you searched for in your URL bar now and you will see why I said what I s…
Why would you search for your passwords at all, then? Wouldn't it make more sense to search for your email and username? And for that matter, why do you have so few that you can easily google for them instead of generating random ones per site? (Fun fact, googling for your e-mail address reveals a hash of your password on MtGox.)
For that matter, I have a unique password (with the necessary special characters) for each account that associates with my identity (Not naming any examples here), but only several unique passwords for websites I don't intend to use much e.g. to read newspapers, and apparently, MtGox.
(Yes, I was searching for my MtGox. password because it was the same password I used for random throwaway sites. No I never used it, I don't even remember having confirmed my account there. My asset in bitcoins amount to I still don't understand why all the downvotes. It would've helped me if someone reminded me not to actually google my password with my browser watching. Apparently not anyone else.