Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Have I been pwned? Check if your email has been compromised in a data breach

haveibeenpwned.com

Post reply on HN
Print view View original

71–80 of 294 posts

Re: Have I been pwned? Check if your email has been compromised in a data breach

#71

Post by ufmace »

wil421 wrote: post #17

Adobe got me. Does lastpass work great for checking banking on cellphones and other logins that would require a cut and paste on a desktop?

Yup, works great, I've been using it for over a year. To login to banking on your phone, you first go to the Lastpass app, login to that, then copy the password to your bank, open their app, and paste the password in. Lastpass for Android also now has a notification that stays up while you're logged in, to remind yourself to log back out when you're done.

Re: Have I been pwned? Check if your email has been compromised in a data breach

#72

Post by gerow »

mintplant wrote: post #68
rfnslyr wrote: post #57

Earlier quoted context omitted.

Same here, with completely randomized passwords 60 chars long and different emails. IM INVISIBLE!

Might not want to give away your exact password length publicly.

Considering that's 394 bits of entropy, I think rfnslyr might get away with it.

Re: Have I been pwned? Check if your email has been compromised in a data breach

#73

Post by da_n »

pvnick wrote: post #51

Shit. Looks like I got caught up in the adobe breach. Let this be a lesson to all engineers in charge of such situations to implement strong security. You are partially responsible for these disasters. I got a call from PayPal a week or two ago. It turns out somebody in Indonesia accessed my Paypal account, presumably with credentials scraped from adobe. I know, I know, shame on me for reusing passwords. Luckily no d…

This should be a lesson not to manage your own passwords, use a password manager there are many to choose from. I was also caught up in the Adobe breach but my password was randomly generated by my password manager.

Re: Have I been pwned? Check if your email has been compromised in a data breach

#74

Post by alexgaribay »

pvnick wrote: post #51

Shit. Looks like I got caught up in the adobe breach. Let this be a lesson to all engineers in charge of such situations to implement strong security. You are partially responsible for these disasters. I got a call from PayPal a week or two ago. It turns out somebody in Indonesia accessed my Paypal account, presumably with credentials scraped from adobe. I know, I know, shame on me for reusing passwords. Luckily no d…

After the Macrumors breach (I had only signed up about 2 weeks before it happened), I decided it was time to make all my passwords unique and to use a credentials manager like 1Password. I too shared the same password for multiple sites/services (shame on me too).

Re: Have I been pwned? Check if your email has been compromised in a data breach

#75

Post by elwell »

mintplant wrote: post #68
rfnslyr wrote: post #57

Earlier quoted context omitted.

Same here, with completely randomized passwords 60 chars long and different emails. IM INVISIBLE!

Might not want to give away your exact password length publicly.

unless it's >= 60

Re: Have I been pwned? Check if your email has been compromised in a data breach

#77

Post by Joeboy »

I am in the habit of making up email addresses on the fly when I register for things. Looking in my spam folder, in the last couple of days I've had spam to the email addresses I submitted to Adobe, Groupon and Abbey National Bank (now Santander). As people have pointed out email addresses are not secret, but if they've leaked out of these businesses' databases it's a bit worrying what else they might be leaking.

Re: Have I been pwned? Check if your email has been compromised in a data breach

#78

Post by orn »

pvnick wrote: post #51

Shit. Looks like I got caught up in the adobe breach. Let this be a lesson to all engineers in charge of such situations to implement strong security. You are partially responsible for these disasters. I got a call from PayPal a week or two ago. It turns out somebody in Indonesia accessed my Paypal account, presumably with credentials scraped from adobe. I know, I know, shame on me for reusing passwords. Luckily no d…

My wife was on the Adobe list, the same credit card she used at Adobe was charged from Amazon or paypal ( I can't remember which ) couple of weeks after the leak. She called the bank they closed it right away and took the charges off the card.

Re: Have I been pwned? Check if your email has been compromised in a data breach

#79

Post by benjamincburns »

I'd like to see a site which validates whether or not your password is exposed. Users should assume that it is exposed, but it would be nice to know wether or not it's floating around in some list somewhere.

Problem is, I can't think of a computationally efficient way to perform this check securely. I could see handing the user an nonce, asking them to manually hash their password concatenated with the nonce, and then comparing the user's response with a list you've hashed yourself, but I'm sure this won't scale well.

Is there such a thing as a secure, or "blind", bloom filter which allows a user to search for some chunk of text without exposing to the world what that chunk of text is?

Edit: Hmm, this might be what I'm looking for: http://www.tdp.cat/issues/tdp.a015a09.pdf

Re: Have I been pwned? Check if your email has been compromised in a data breach

#80

Post by stevekemp »

zoul wrote: post #19

It’s a bummer to find my e-mail between the leaked Adobe accounts. Especially after the ordeal I had to go through to have my Adobe account “deleted” months ago: You have requested that we deactivate your Adobe account. We have sent a request to the relevant team to process your request. Please note that you will lose access to Adobe services and support for which you have registered or paid for. You will not be able…

It took 120+ days for my ebay account to get deleted, but thankfully I could delete my paypal in only a few weeks.
Post reply on HN