What is it with all kinds of companies building https://haveibeenpwned.com/ clones into their products lately?
this post was submitted on 23 Apr 2024
90 points (97.9% liked)
Privacy
32039 readers
791 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
I mean why not. Having the Email provider automatically telling you that your E-Mail was found in a leak is really nice. Not everyone knows haveibeenpwned
Also, I have a ton of aliases through Proton. I'm not going to put each on into haveibeenpwned
Oh yea same actually. Now this feature in ProtonMail makes even more sense.
Id need a paid haveibeenpwned subscription for domain level support. Proton is adding this to their existing subscription services to add value to what they offer. It's a smart move, especially once they add in catch-all/SL alias support
It’s cheapish, and automates something that you should be doing. Easy way to add value to what you pay for
According the the post they also use other intelligence data
So, just give us your secret creds and well keep them secret while searching the darknet for them?
Looks like another Have I Been Pwned, at least at a glance they're looking for email addresses, and given that you have your email with them if you're using this service they kinda do have it already
I use my own domain, so I can do things like Home Depot, At my domain, and Amazon at my domain, and eBay at my domain, etc. So if anybody besides them emails me, I know that it has been misused or lost.
Just do the plus trick, you don’t need own domain
Some websites don't recognize the plus trick and won't accept it. And I use my own domain so that if I wish to switch email providers ever again, I don't have to switch all of my email addresses again. I can just switch my domain to a new provider and all of my emails stay the way they are.
Lots reject it. Most retailers use emails like phone numbers: unique to a single person. They often simply reject temporary emails of this nature. In fact, at one point even lemmy.world was not signing anyone up if they used temp emails.
Which is another reason that I don't use temp emails and use my own domain instead. I have run across that once or twice when using aliases like simple login.
Crap sites if they are trying to sanitise email like that, but no matter you can use dots too if you don’t want to go to trouble of own domain.
Problem is, nothing prevents anyone from removing the plus part before sanding the mail. Isn't it a standard at basically any email provider?