Live data from Hacker News

Firefox Monitor

monitor.firefox.com

1–10 of 227 posts

Re: Firefox Monitor

#2
How does this relate to HaveIBeenPwned.com? Is it a separate effort? Does it have more data? Is it built on top of their data?

I've seen other services (like 1Password) just rely on HaveIBeenPwned because it's pretty solid – seems like it would be nice for the industry to coalesce around it and build these kinds of alerting features on top of it.

Re: Firefox Monitor

#3
post #2

How does this relate to HaveIBeenPwned.com? Is it a separate effort? Does it have more data? Is it built on top of their data? I've seen other services (like 1Password) just rely on HaveIBeenPwned because it's pretty solid – seems like it would be nice for the industry to coalesce around it and build these kinds of alerting features on top of it.

I'm pretty sure it's a partnership with HaveIBeenPwned: https://www.troyhunt.com/were-baking-have-i-been-pwned-into-...

> We're Baking Have I Been Pwned into Firefox and 1Password

> Over the coming weeks, Mozilla will begin trialling integration between HIBP and Firefox to make breach data searchable via a new tool called "Firefox Monitor".

Re: Firefox Monitor

#4
post #2

How does this relate to HaveIBeenPwned.com? Is it a separate effort? Does it have more data? Is it built on top of their data? I've seen other services (like 1Password) just rely on HaveIBeenPwned because it's pretty solid – seems like it would be nice for the industry to coalesce around it and build these kinds of alerting features on top of it.

> Is it built on top of their data?

Yes.

# How does Firefox Monitor know my information was hacked during a particular breach?

Firefox Monitor gets its data breach information from a publicly searchable source, Have I Been Pwned. If you don’t want your email address to show up in this database, visit the opt-out page.

https://support.mozilla.org/en-US/kb/firefox-monitor-faq

Re: Firefox Monitor

#5
post #2

How does this relate to HaveIBeenPwned.com? Is it a separate effort? Does it have more data? Is it built on top of their data? I've seen other services (like 1Password) just rely on HaveIBeenPwned because it's pretty solid – seems like it would be nice for the industry to coalesce around it and build these kinds of alerting features on top of it.

[deleted]

Re: Firefox Monitor

#8
post #2

How does this relate to HaveIBeenPwned.com? Is it a separate effort? Does it have more data? Is it built on top of their data? I've seen other services (like 1Password) just rely on HaveIBeenPwned because it's pretty solid – seems like it would be nice for the industry to coalesce around it and build these kinds of alerting features on top of it.

When you submit your email after the breaches list there's this notice "Breach data provided by Have I Been Pwned", so I guess it's a joint effort.

Re: Firefox Monitor

#9
post #6

"This email appeared in 17 known data breaches." How does this help at all? What can I do about it? Some of the breaches are years old...

First, if you know you've reused a password on one of the services listed, then you know to go change that password everywhere. Everyone should be using unique passwords and a password manager, but some of these breaches are so old they're before that was a commonly-used practice.

Second, you can look into each incident to see what exactly was breached -- personal information, payment info, and so on. It's good information to know.

Post reply on HN