haveibeenpwned
Latest
Have I Been Pwned's code base will be open sourced
It'll help ensure 'a more sustainable future' for the project after a failed acquisition process.
Collection 1 data breach covers more than 772 million email addresses
If you're signed up for one of the many services that alerts you to data breaches when they're discovered (if you're not, you probably should be) then you likely have an email waiting for you. Troy Hunt runs Have I Been Pwned where he makes it his business to dig up these files as they're being passed around by hackers, and has alerted the world to "Collection #1," which claims to combine usernames and passwords from thousands of databases.
Firefox Monitor will tell you when your passwords are compromised
After a few months of testing, Mozilla has launched its free Firefox Monitor service that notifies users when their credentials are stolen as part of a data breach. The website, which is essentially an external interface to Troy Hunt's Have I Been Pwned (HIBP) database, also allows users to sign up for notifications in case their email addresses are found in future breaches.
Firefox and 1Password now bring data breach notifications to you
Firefox and 1Password have made it much easier to find out if your email address and password have ever been been leaked due to a data breach. 1Password now comes integrated with the Have I Been Pwned service, allowing you to check your credentials against the database within its interface, while Firefox is testing a similar feature. The "pwned" website first worked with Mozilla months ago for a breach alerts feature that highlights if a website you're visiting suffered a data breach in the past. This time, they've expanded their partnership and have started testing a tool called Firefox Monitor that you can use to search the pwned database right within the browser. It even gives you a way to sign up for email alerts if your account gets compromised.
Ticketfly hacker stole more than 26 million email and home addresses
A hacker has leaked personal information for more than 26 million Ticketfly users after last week's data breach. That's according to Troy Hunt, the founder of Have I Been Pwned, which lets you check whether your email address has been included in various data breaches.
UK and Australia are monitoring their domains with Have I Been Pwned
A lot of people have used Troy Hunt's Have I Been Pwned to see if their email addresses are attached to any services that have experienced data breaches. Large organizations can also use it to search their domain names as a group and now, the service counts the UK and Australian governments among them. As Hunt explained in a blog post: "Amongst those verified domain searches are government departments and they too are enormously varied; local councils, legal and health services, telecoms and infrastructure etc...The thing is, loads of government departments within different countries have all been running these searches independently and that means an awful lot of duplication of effort has been going on."
Firefox will soon flag sites that have been hacked
Firefox is having a good run right now, having just released its much speedier and better-looking Quantum browser. It's now working on a new feature that security fans are bound to like: It will warn you if you're visiting a site that has suffered a data breach. Firefox is working on the feature in collaboration with "Have I Been Pwned," the popular site that can check your email and tell you if your credentials have been stolen by hackers.
Need a new password? Don't choose one of these 306 million
Troy Hunt, the security expert behind Have I Been Pwned (HIBP), has released 306 million previously-pwned passwords in a bid to help individuals and companies ramp up their online security. The passwords have been mined from dozens of data breaches, and now anyone can download them for free. HIBP lets someone see if their email address has appeared in a breach, but doesn't reveal the associated password for that particular compromised service. Now, Hunt -- who has written extensively on password protection -- has flipped the model on its head, making passwords searchable without the associated email address or username.
