New
#1
Another Major Email & Password Breach
See https://www.wired.com/story/collecti...nts-passwords/
Is there any way to find out on which sites your address has been compromised?
Another Major Email & Password Breach
-
-
New #2
If you enter your email on the site mentioned in the article and scroll down it shows details of which sites were compromised (assuming your email is one of them):
https://haveibeenpwned.com/
and just for example:
https://prnt.sc/m8hgzm
I don't mind sharing this because I deactivated the compromised account once I knew of the problem.
-
New #3
Troy Hunt: The 773 Million Record Data Breach
Whilst I can't tell you precisely what password was against your own record in the breach, I can tell you if any password you're interested in has appeared in previous breaches Pwned Passwords has indexed. If one of yours shows up there, you really want to stop using it on any service you care about.
-
New #4
So...in order to find out whether I have been 'pwned', I am to enter my email address into a site that I know nothing about called HIBP....
-
-
-
-
New #8
I think this is a interesting question and searched for info in the HIBP site:
from the site:
When you search for an email address
Searching for an email address only ever retrieves the address from storage then returns it in the response, the searched address is never explicitly stored anywhere. See the Logging section below for situations in which it may be implicitly stored.
Data breaches flagged as sensitive are not returned in public searches, they can only be viewed by using the notification service and verifying ownership of the email address first. Sensitive breaches are also searchable by domain owners who prove they control the domain using the domain search feature. Read about why non-sensitive breaches are publicly searchable.
Logging
Only the bare minimum logs required to keep the service operational and combat malicious activity are stored. This includes transient web server logs, logging of unhandled exceptions using Raygun, Google Analytics to assess usage patterns and Application Insights for performance metrics. These logs may include information entered into a form by the user, browser headers such as the user agent string and in some cases, the user's IP address.
Is my email address saved when searched ? I understand yes it is, albeit the formulation is quite obscure and difficult to understand. Am I wrong?
-
-
New #9
The site is currently down right now, but The Electronic Frontier Foundation has a tool/site, that shows you just how much information can be gleaned from your browser and browser header.
Panopticlick
Panopticlick | AboutIn addition to tracker blocking, Panopticlick measures the uniqueness of your browser. We anonymously log the following information, and compare it to a database of many other Internet users' configurations that we’ve observed recently:
The user agent string from each browser
The HTTP ACCEPT headers sent by the browser
Screen resolution and color depth
The Timezone your system is set to
The browser extensions/plugins, like Quicktime, Flash, Java or Acrobat, that are installed in the browser, and the versions of those plugins
The fonts installed on the computer, as reported by Flash or Java.
Whether your browser executes JavaScript scripts
Yes/no information saying whether the browser accepts various kinds of cookies and "super cookies"
A hash of the image generated by canvas fingerprinting
A hash of the image generated by WebGL fingerprinting
Yes/no whether your browser is sending the Do Not Track header
Your system platform (e.g. Win32, Linux x86)
Your system language (e.g. en-US)
Your browser's touchscreen support
Then, we generate a uniqueness score — letting you see how easily identifiable you might be as you surf the web. Here’s more information on how this score is derived.
-
New #10
I understand that you say privacy is hard to have nowadays, I can agree with that
Quote
Related Discussions
