Live data from Hacker News

The unattributable “db8151dd” data breach

troyhunt.com

41–50 of 155 posts

Re: The unattributable “db8151dd” data breach

#41
post #35
post #20

Earlier quoted context omitted.

Instructions are on this page: https://haveibeenpwned.com/DomainSearch

For people who care, it uses reCAPTCHA. I stopped there.

Thanks for saving me a click. No desire to play "guess how many minutes I'll have to spend clicking sidewalks" today.

Re: The unattributable “db8151dd” data breach

#42
post #2

For the people that use unique per-merchant e-mail addresses (like someone+amazon@...), could you try some of those aliases on HaveIBeenPwned and see which ones come up in this breach? That might shed some light onto its origin.

It's got my generic one (firstname@), and an older Facebook login email address (facebook@, changed now since Kickstarter leaked that one). Interesting.

Re: The unattributable “db8151dd” data breach

#43
post #2

For the people that use unique per-merchant e-mail addresses (like someone+amazon@...), could you try some of those aliases on HaveIBeenPwned and see which ones come up in this breach? That might shed some light onto its origin.

I follow this pattern exclusively, though I haven't actually received any recent HIBP notifications. I'll do a manual check.

Edit: three personal domains registered nothing. One corporate domain registered a double digit hit. If I discern any clues I'll get back to the thread.

Re: The unattributable “db8151dd” data breach

#45
post #2

For the people that use unique per-merchant e-mail addresses (like someone+amazon@...), could you try some of those aliases on HaveIBeenPwned and see which ones come up in this breach? That might shed some light onto its origin.

Does hibp know enough about the regular providers such as gmail that support this, to be able to attribute someone+amazon@gmail.com with someone@gmail.com?

Re: The unattributable “db8151dd” data breach

#47
post #11
post #2

For the people that use unique per-merchant e-mail addresses (like someone+amazon@...), could you try some of those aliases on HaveIBeenPwned and see which ones come up in this breach? That might shed some light onto its origin.

BTW, since many people don't seem to be aware of this: If you have your own domain, you can get informed by haveibeenpwned automatically if any mail address from that domain is in a breach. All that is required is that you're reachable on that domain through an address like 'postmaster'. This feature can be found under 'domain search'. Since I use a new address for pretty much anything this is very handy.

Unfotunately, it no longer seems to list the impacted email addresses in those domains have been comprimised, so it's not too useful.

Re: The unattributable “db8151dd” data breach

#48
post #35

Earlier quoted context omitted.

For people who care, it uses reCAPTCHA. I stopped there.

Thanks for saving me a click. No desire to play "guess how many minutes I'll have to spend clicking sidewalks" today.

If it takes you minutes to solve a recaptcha your problem might not be the recaptcha...

Re: The unattributable “db8151dd” data breach

#49
post #27

Could it be Google+? 3 of 3 my Gmail addresses associated with their profile in some way were on it. Two of it I might have used to register a domain, but the last one I used for G+ and one other website only and none of any friends know this. Also I'm not in US or have US background, can't be from American friends' phones or retailer CRM.

[deleted]

Re: The unattributable “db8151dd” data breach

#50
Dataset for sale: [redacted]

Similar data structure: https://stackblitz.com/edit/angular-soswe4?file=src%2Fapp%2F...

Owner works for: https://covve.com

Covve: This simple yet state-of-the-art app will revolutionise your business relations like you've never seen.

Edit: Response: https://twitter.com/covve/status/1261287954967941120

Post reply on HN