Health eProfile Articles and Education
Nathan E Botts
/ Categories: Privacy and Security

';--have i been pwned?

Check if you have an account that has been compromised in a data breach

';--have i been pwned?

From the creator of the ';--have i been pwned? website: "I often write up analyses of the passwords disclosed in website breaches. For example, there was A brief Sony password analysis back in mid-2011 and then our local Aussie ABC earlier this year where I talked about Lousy ABC cryptography cracked in seconds as Aussie passwords are exposed. I wrote a number of other pieces looking specifically at the nature of the data exposed in individual sites, but what I really found interesting was when I started comparing breaches.

In the middle of last year I wrote What do Sony and Yahoo! have in common? Passwords! and found that 59% of people with accounts in both sources used the same password. Then just last month when I wrote about “the mother of all breaches” in Adobe credentials and the serious insecurity of password hints, I found that many of the accounts from the Sony breach were also in Adobe’s. In that case I explained how this put personal information at serious risk as the unencrypted password hints in Adobe’s breach often had the answers in the unencrypted Sony passwords!

As I analysed various breaches I kept finding user accounts that were also disclosed in other attacks – people were having their accounts pwned over and over again. "

Click here to read more from Troy Hunt

Previous Article December 2013 Year-end Wrap and 2014 Trends to Watch
Next Article Making ease of use the default for new product design
Print
731 Rate this article:
5.0
  • Comments

Leave a comment

Add comment