Have I been pwned?

01 January 2019, 07:40 PM

Steve Miller

Have I been pwned?

Website where you can enter your email address and see if there have been any security breaches that included that address. I found two.

Have I been pwned?

01 January 2019, 07:46 PM

Mikhailoh

Why do I have a nagging distrust of places that purport to tell me this if I only enter some personal information?

--------------------------------
"A mob is a place where people go to get away from their conscience" Atticus Finch

01 January 2019, 07:53 PM

Steve Miller

I thought the same thing. Looked around quite a bit and it appears to be legit.

All you enter is your email address so there is not a lot of risk.

01 January 2019, 09:14 PM

Piano*Dad

Unless you mind being added to 3,539 new email advertising lists ...

01 January 2019, 09:21 PM

QuirtEvans

quote:
Originally posted by Piano*Dad:
Unless you mind being added to 3,539 new email advertising lists ...

I signed up for it a couple of years ago, and haven't noticed an uptick in junk email.

01 January 2019, 09:23 PM

Steve Miller

Mark the first one as spam and you’ll never see another.

No big deal.

02 January 2019, 10:40 AM

Amanda

I don't see any reason to suspect this site's ulterior motives - seems to be offering a service. Namely, one that saves passwords, and here that generates unique passwords per account as they say. Haven't looked into it in detail, but I'm guessing it starts off free only eventually to have a pricetag for greater convenience in using it.

I use Last Pass right now and it serves me well. The only liability I see with the Pawned service is there's no easy way to save their vault of passwords (G-d knows how complex the Passwords are!), so one becomes wholly dependent on them in short order. (All but you tech savvy persons able to save them elsewhere.)

02 January 2019, 10:59 AM

Amanda

Bad sign?

If you check your number of pwnages, you'll get a reply email to check your email's authenticity.

Bottom of that, is a notice that the page is sponsored by the founder and another saying "this email was sent by..." such and such an IP address.

Along with that, it offers to tell you more about the owner of the address (link).

AFAIK much (all?) of the info is incorrect most notably my home address. I've had outright spammers contacting me with better info.

What to make of this inaccuracy...

18 January 2019, 07:43 PM

wtg

quote:
There are breaches, and there are megabreaches, and there’s Equifax. But a newly revealed trove of leaked data tops them all for sheer volume: 772,904,991 unique email addresses, over 21 million unique passwords, all recently posted to a hacking forum.

The data set was first reported by security researcher Troy Hunt, who maintains Have I Been Pwned, a way to search whether your own email or password has been compromised by a breach at any point. (Trick question: It has.) The so-called Collection #1 is the largest breach in Hunt's menagerie, and it’s not particularly close.

https://www.wired.com/story/co...-accounts-passwords/

--------------------------------
We are all visitors to this time, this place. We are just passing through. Our purpose here is to observe, to learn, to grow, to love… and then we return home. - Australian Aboriginal proverb

Bazootiehead-in-training