news.volyx.in

A decade of Have I Been Pwned (troyhunt.com)

677 points by c5karl · 991 days ago · 174 comments on HN

Article summary

The article celebrates the 10th anniversary of Have I Been Pwned (HIBP), a website that allows users to check if their email addresses have been compromised in data breaches. The author, Troy Hunt, reflects on the website's history, its impact on cybersecurity, and its unexpected success. HIBP has become a valuable resource for individuals, companies, and governments, and has been referenced in various media outlets. The website has also led to collaborations with law enforcement agencies and other organizations to mitigate credential reuse.

Main themes

  • cybersecurity
  • data breaches
  • password security
  • HIBP history
  • collaboration with law enforcement
  • passkeys and password managers
  • user safety and opt-out processes
  • credential reuse and mitigation

What commenters say

  • Some commenters find the story of HIBP's success and its weird domain name variations amusing.
  • The use of passkeys is seen as a more secure alternative to traditional passwords, but some argue that it may lead to dependence on big tech companies.
  • Others believe that password managers have made HIBP less relevant, and that the website may even do more harm than good by revealing sensitive information.
  • There is disagreement over whether HIBP is still a hobby project or a more substantial entity, with some citing its partnerships with governments and companies as evidence of its impact.
  • Some commenters argue that HIBP's opt-out process is not sufficient to protect user safety, particularly for victims of stalking or harassment.
  • Others counter that email verification would make the service too costly to run, and that users can already find much of the same information through other means.
  • The effectiveness of HIBP in preventing credential reuse is questioned by some, who argue that other services, such as SpyCloud, may be more effective in this regard.
  • There is also discussion over the role of HIBP in raising public awareness of cybersecurity issues, and its potential impact on user behavior.