Live data from Hacker News

Have I Been Pwned 2.0

troyhunt.com

151–160 of 323 posts

Re: Have I Been Pwned 2.0

#151
The ';-- in front of Pwned is a brilliant idea but less brilliant execution. Missed opportunity, I'm wondering how many people don't realize what it is

Re: Have I Been Pwned 2.0

#152
Unfortunately the new UI does not allow to search for leaked phone numbers anymore. The old did (e.g. could check for facebook phone number leak, see https://www.troyhunt.com/the-facebook-phone-numbers-are-now-...). The new does not let it pass through the input field.

Edit: it's also statet in the announcement:

> Just one little thing first - we've dropped username and phone number search support from the website

But it's really a bad time to remove this feature since there's a ongoing law suite against facebook in germany (https://www.vzbv.de/pressemitteilungen/facebook-datenleck-be..., hgerman link) that utilized the search there to know if one can participate or not.

Re: Have I Been Pwned 2.0

#153
post #151

The ';-- in front of Pwned is a brilliant idea but less brilliant execution. Missed opportunity, I'm wondering how many people don't realize what it is

I definitely know what it is but for those who don’t what would you tell them

Re: Have I Been Pwned 2.0

#154
post #149

Earlier quoted context omitted.

This is literally what happened in Belgium when politicians did budget. A piece of the expected slice was traffic fines. So that means that any kind of system that would improve traffic other than repressive measures would cost them twice, once to fix the situation and again when they can issue less fines.

If I drive carelessly and get a meaningful fine, I'll think twice next time, irrespective of who gets the money. I only care that I am fined. Unless the police starts to administer fines when they shouldn't, all is good, right? What happened in Belgium?

I don’t know about Belgium specifically, but one of the usual issues is that it incentivises aggressive policing of minor issues that make money (like parking violations), which takes resources out of other problems (like mugging).

Re: Have I Been Pwned 2.0

#156
post #149

Earlier quoted context omitted.

This is literally what happened in Belgium when politicians did budget. A piece of the expected slice was traffic fines. So that means that any kind of system that would improve traffic other than repressive measures would cost them twice, once to fix the situation and again when they can issue less fines.

If I drive carelessly and get a meaningful fine, I'll think twice next time, irrespective of who gets the money. I only care that I am fined. Unless the police starts to administer fines when they shouldn't, all is good, right? What happened in Belgium?

Driving carefully is not a boolean. It's possible to design roads/environments (accidentally or not) in such a way that the “you drove carelessly” metric that triggers the fine statistically applies more often.

Re: Have I Been Pwned 2.0

#157
post #151

The ';-- in front of Pwned is a brilliant idea but less brilliant execution. Missed opportunity, I'm wondering how many people don't realize what it is

I definitely know what it is but for those who don’t what would you tell them

I think it's an SQL injection.

Re: Have I Been Pwned 2.0

#159
post #47

Amazing that even within the last decade a site as large as LinkedIn could be storing unsalted passwords. How does anyone fail at this in the modern era?

For all the talk of AI Slop, I don’t hear much about the fact that we have been suffering from Outsourced Slop for decades now. I suspect that is how this kind of thing also fail at LinkedIn. I say that based on my experience dealing with outsourcing companies and the product they produce through outsourced programmers. It’s really just been a similar problem as with AI code, that without strong and competent managem…

I've seen coworkers at Big Tech Co™ make huge security blunders despite attending prestigious universities (Berkeley, Stanford, etc) and having 5+ years of industry experience. No LLM slop required. Just rushing to meet deadlines while requirements shift rapidly enough that details get overlooked.

Re: Have I Been Pwned 2.0

#160
post #151

The ';-- in front of Pwned is a brilliant idea but less brilliant execution. Missed opportunity, I'm wondering how many people don't realize what it is

I definitely know what it is but for those who don’t what would you tell them

Relevant xkcd: https://xkcd.com/327/
Post reply on HN