LastPass has a similar service for some of the recent (and not so recent) hacks: * https://lastpass.com/adobe/ * https://lastpass.com/linkedin/ * https://lastpass.com/lastfm/ * https://lastpass.com/eharmony/
[deleted]
Have I been pwned? Check if your email has been compromised in a data breach
61–70 of 294 posts
Re: Have I been pwned? Check if your email has been compromised in a data breach
#62For cases like these is why you should NEVER use the same password in different sites. While my email is in the Adobe list the password I used there is unique so I don't bother too much-other that I've lost any trust in Adobe and I'll think twice about doing any business with them in the future.
Re: Have I been pwned? Check if your email has been compromised in a data breach
#63As someone who was 'pwned' by the Adobe leak, I have no idea how bad the pwnage was. That is, I don't recall what my Adobe password was, and so I have no idea which of my many passwords was compromised.
Also, I partially went through the Adobe password reset procedure two or three times--each time guessing at what my original password was. Unfortunately, they accepted all of my guesses, so I was still none the wiser about which password was compromised.
To top the entire ordeal off, Adobe was not the one to tell me that my password was compromised. Instead, my hosting provider and some other services notified me.
Re: Have I been pwned? Check if your email has been compromised in a data breach
#64Shit. Looks like I got caught up in the adobe breach. Let this be a lesson to all engineers in charge of such situations to implement strong security. You are partially responsible for these disasters. I got a call from PayPal a week or two ago. It turns out somebody in Indonesia accessed my Paypal account, presumably with credentials scraped from adobe. I know, I know, shame on me for reusing passwords. Luckily no d…
I woke up this Thanksgiving with a bunch of email notifications from Paypal that my account had been hacked and taken over. I (also shame on me) tend to reuse some of my passwords, and figured someone got into my Paypal account using my adobe credentials, not even being sure if I had created an account with adobe for anything in the past.
I checked my email address on this site and it didn't find any pwnage.
I'm relieved my email address isn't in any of these leaks, but also now concerned about whatever it was that let someone into my paypal account so easily...
Re: Have I been pwned? Check if your email has been compromised in a data breach
#65Re: Have I been pwned? Check if your email has been compromised in a data breach
#66For cases like these are why you should NEVER
Never finish your comments?
Re: Have I been pwned? Check if your email has been compromised in a data breach
#67Adobe got me. Does lastpass work great for checking banking on cellphones and other logins that would require a cut and paste on a desktop?
I use lastpass on my android phone. I use 2 factor with an nfc yubikey.
http://www.yubico.com/products/yubikey-hardware/yubikey-neo/
Re: Have I been pwned? Check if your email has been compromised in a data breach
#68I tend to create a new email address for everything I sign up for. This makes a little harder to check :) EG: twitter@example.com, facebook@example.com, hackernews@example.com It also makes it a little harder for people to find me on social media. Not sure if that's a bug or a feature ;)
Same here, with completely randomized passwords 60 chars long and different emails. IM INVISIBLE!
Might not want to give away your exact password length publicly.
Re: Have I been pwned? Check if your email has been compromised in a data breach
#69This is a great service -- I've already shared it with my colleagues. But doesn't this tool now make it easier for those with a grudge to find their enemies' compromised accounts? ...all the more reason to change your passwords...
Re: Have I been pwned? Check if your email has been compromised in a data breach
#70For those freaking out about somebody "misusing" this information (your e-mail address) .... I have some bad news.
E-mail addresses are not secret. They cross the wire in plaintext, they get stored in various mail server logs in various relays across the globe, they get passed around by spam analysis services, anti-virus services, and any company you submit it to has the right to sell it and any other information about you to anyone they want, without your consent.
"Although partial regulations exist, there is no all-encompassing law regulating the acquisition, storage, or use of personal data in the U.S. In general terms, in the U.S., whoever can be troubled to key in the data, is deemed to own the right to store and use it, even if the data were collected without permission." [1]
California is one of the few (only?) states with privacy laws, and it basically just says companies must post a privacy policy and follow it - and that policy could, for example, say they are allowed to sell on your information, which i'm sure 99% of companies would opt for.
Your e-mail address alone is not worth much in a general sense. In terms of spammers, they already have all the e-mail addresses in this list. And if on the off chance this guy's service is "selling" e-mail addresses to spammers (at what... $0.10 per e-mail address?), are you really so afraid of someone sending you spam?
[1] https://en.wikipedia.org/wiki/Information_privacy_law#United...
For more information about all the other personal information about you that isn't private, see https://epic.org/privacy/profiling/