This site is BS, I put in a BS email still say I was part of a adobe password breach!!!
I got three hits for president@whitehouse.gov.
Have I been pwned? Check if your email has been compromised in a data breach
161–170 of 294 posts
Re: Have I been pwned? Check if your email has been compromised in a data breach
#162LastPass has a similar service for some of the recent (and not so recent) hacks: * https://lastpass.com/adobe/ * https://lastpass.com/linkedin/ * https://lastpass.com/lastfm/ * https://lastpass.com/eharmony/
Thanks for that; I had ignored the Adobe leak, because why would I have created an Adobe account? Turns out I did at some point, so I guess I'm the goat there.
Often you need to create an account or somehow register your email at sites, just to get something very basic, like a free download, or use a feedback form.
This demonstrates nicely why that's a bad idea.
Re: Have I been pwned? Check if your email has been compromised in a data breach
#163Earlier quoted context omitted.
your email is not a secret.
It's the same reason why you don't reply to spam; it confirms your email is valid. http://www.pcmag.com/article2/0,2817,2376031,00.asp
That's been the conventional wisdom for decades, but I don't actually think it's true. I wonder if anyone has done any tests.
The reply address for spam is almost certainly bogus. And I don't think it makes sense to target people who unsubscribe for more spam. They ain't likely to buy anything.
Re: Have I been pwned? Check if your email has been compromised in a data breach
#164Funny/scary anecdote I experienced a few days ago: most Linux flavors check against the cracklib database when changing passwords, and as I typed in an account password, a brand-new cracklib said it was based on a dictionary word. Now, my passwords are alphanumerical jumble, and they're usually comprised of an alphanumerical jumble "core" that I memorize and then a site-based or computer-based pre- and suffix. So, le…
Believe me when I say all your personal information is on SOMEONES computer. Everyones is.
I hope only the crypto-hash of my password is stored.
Re: Have I been pwned? Check if your email has been compromised in a data breach
#165Earlier quoted context omitted.
This should be a lesson not to manage your own passwords, use a password manager there are many to choose from. I was also caught up in the Adobe breach but my password was randomly generated by my password manager.
What do you do when you are using a different computer and need to login to site?
[deleted]
Re: Have I been pwned? Check if your email has been compromised in a data breach
#166Earlier quoted context omitted.
catchall FTW I follow the following pattern with websites: If the website is important (ex. government), I use @ . My filtering rules are extremely strict, and every mail that doesn't come from the expected website gets automatically flagged as spam and deleted. If their DB leaks, I just change the 4 numbers. If I know the website and it's not an startup, I use @ , ex. facebook@example.com. My filtering rules only fl…
That seems like a lot of overhead to manage. Also, you're going to have a bad day if a spam bot decides to spam thousands of @yourdomain.com. Maybe that's fallen out of practice, but I've seen it happen before.
It's a tried and true spamming tradition and it's going strong. I see plenty of entries like
Envelope-to:
Re: Have I been pwned? Check if your email has been compromised in a data breach
#167Shit. Looks like I got caught up in the adobe breach. Let this be a lesson to all engineers in charge of such situations to implement strong security. You are partially responsible for these disasters. I got a call from PayPal a week or two ago. It turns out somebody in Indonesia accessed my Paypal account, presumably with credentials scraped from adobe. I know, I know, shame on me for reusing passwords. Luckily no d…
Mine showed for Adobe as well, but I don't have an account with Adobe?
Re: Have I been pwned? Check if your email has been compromised in a data breach
#168Earlier quoted context omitted.
This should be a lesson not to manage your own passwords, use a password manager there are many to choose from. I was also caught up in the Adobe breach but my password was randomly generated by my password manager.
I am surprised by how few people are aware of this: https://www.pwdhash.com/ Convenience provided via Chrome/Firefox extensions, portability provided by the website.
I second this. I've been using it for a few years now. It gives me great peace of mind knowing that my password on a site like HN is something like "e5wLoMB1kZ". I only have to remember a few passwords and yet each site has a unique password.
Even in the event a leak of plain-text passwords I'm still secure in knowing that my other accounts won't be compromised unless there is a very determined attacker.
However, you do have to put some trust in the extension and the website. Fortunately, the website has some good credentials and the extensions have appeared clean... for now.
Re: Have I been pwned? Check if your email has been compromised in a data breach
#169Shit. Looks like I got caught up in the adobe breach. Let this be a lesson to all engineers in charge of such situations to implement strong security. You are partially responsible for these disasters. I got a call from PayPal a week or two ago. It turns out somebody in Indonesia accessed my Paypal account, presumably with credentials scraped from adobe. I know, I know, shame on me for reusing passwords. Luckily no d…
One of my addresses was also in the Adobe breach. No idea what password I used there, but I'm fairly sure it must have been either my common "junk" password, shared with tons of forums, but nothing that poses any serious risk to me (just to those forums). Or if they had stricter requirements, some variation on it that I always forget, so I have to ask them for a new password every time anyway. I certainly don't reuse…
If you're using a forum, outré in front of a computer. Keeping track of things is one of the things computers are _best_ at. Get yourself a password manager. I use 1Password, but I hear good things about KeyPass and LastPass too.
Seriously - you can't manage 2013 grade password complexity requirements for all the places you need passwords in your head any more (it's likely you never could…)
Get a tool to help, computers are wonderful tools.
Re: Have I been pwned? Check if your email has been compromised in a data breach
#170Earlier quoted context omitted.
This should be a lesson not to manage your own passwords, use a password manager there are many to choose from. I was also caught up in the Adobe breach but my password was randomly generated by my password manager.
I am surprised by how few people are aware of this: https://www.pwdhash.com/ Convenience provided via Chrome/Firefox extensions, portability provided by the website.
It's a start, but you'd need all the mobile platforms on it too.