Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
nstj
on Aug 31, 2016
|
parent
|
context
|
favorite
| on:
The Dropbox hack is real
Fun fact: Have I Been Pwned neither salts nor hashes the creds which it stores on its website, potentially making itself an interesting target for hackers[0]
[0]:
http://risky.biz/RB388
TazeTSchnitzel
on Aug 31, 2016
|
next
[–]
HIBP doesn't store passwords, it only stores usernames and email addresses.
nstj
on Sept 1, 2016
|
parent
|
next
[–]
apologies, s/"creds"/"user data"
mhaymo
on Sept 1, 2016
|
root
|
parent
|
next
[–]
How exactly do you expect them to send an email to an address they only have a hash of?
tamana
on Sept 1, 2016
|
prev
[–]
HIBP hosts only completely Public alread leaked data -- that's how they source their data
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
[0]: http://risky.biz/RB388