81–90 of 128 posts
Not sure whether it's cool to post any links here.
Reading this tweet ( https://twitter.com/troyhunt/status/1085095504197779456 ), I've just donated the price of a coffee to Troy ( https://haveibeenpwned.com/Donate ), and you should too. HIBP is quickly becoming a critical piece of the Internet security infrastructure, and Troy should be lauded for undertaking it basically by himself.
Here's one more record to add: my HN password is my username. Feel free to use this account for anonymous well-intentioned posting.
This is frankly terrifying and very ironic. Websites put so much effort into tracking every little thing about their users, from where they come from to what they do. Hotjar ( https://hotjar.com ) goes ahead and tracks mouse movements and now we even have crazy f-ed up startups like Peekmap ( https://peekmap.com ) that claim to predict eye gaze without the webcam. And yet they get pwned so easily. So much effort into…
How does Peekmap work? Their website contains no details. I just can't imagine how you can reliably track a users eye gaze without a webcam - is it just some snake oil pretending to solve everything with AI?
Earlier quoted context omitted.
and receive no meaningful legal consequences. These people should be on the hook for all damage done with this dump, but they won't be, so it doesn't really matter. It's not ironic, it's just business as usual. Collecting data on users should be extremely risky, even if they consent to it's collection.
We are getting there, thanks to the EU. The GDPR directive has teeth, and it /will/ affect all larger US companies as well. Fines of up to 4% of yearly revenue area no joke: https://www.forbes.com/sites/bernardmarr/2018/06/11/gdpr-the...
so strange ... i’ve checked again if i was pwned and on the top there is a service i’ve never signed up - Apollo, a sales acceleration platform i’m a simple dev and never subscribed to a sales service ....
Reading this tweet ( https://twitter.com/troyhunt/status/1085095504197779456 ), I've just donated the price of a coffee to Troy ( https://haveibeenpwned.com/Donate ), and you should too. HIBP is quickly becoming a critical piece of the Internet security infrastructure, and Troy should be lauded for undertaking it basically by himself.
After that please also donate your hard earned money to Bill Gates. He voluntarily spends 100% of his time being a philanthropist. He also desperately needs some poor people to pay for his coffee.
Earlier quoted context omitted.
He's suggesting using (the link is from your link): https://haveibeenpwned.com/Passwords Which does upload your password, which I think is an unacceptable risk.
Well it claims to take the first 5 characters of the SHA of the plaintext. But it also pulls untrusted code/CSS from various sites over HTTP. It's far from unclear who controls that code. For instance this wall of code: http://az416426.vo.msecnd.net/scripts/a/ai.0.js A more sane approach would be to just put your passwords in a file, maybe by export from your database manager. Take a sha1 of each password, then submi…
If it’s ‘far from unclear’, it would seem to imply things are rather clear, IMHO.