A new Pwned Passwords tool appears on the site Have I been pwned ?. Some 306 million passwords found in data leaks.
Have I been pwned? (HIBP) is a creation of the Australian security expert Troy Hunt (and who works at Microsoft). By entering an email address or a user name, this service allows users to know if an account has been compromised by appearing in a data leak, without revealing an associated password.
HIBP has just acquired a new product called Pwned Passwords, which now makes the passwords searchable without the associated identifiers. A collection of 306 million "real world" passwords encompassing over one billion accounts that have been exposed in data leaks.
However, Troy Hunt says that one should not send a word actively used to a third-party service ... including HIBP even if it is clearly trustworthy. The Pwned Password tool should only be used to verify passwords that are no longer used.
In a blog post, the security expert writes that the service could be used to demonstrate to a friend or colleague that such an exemplary password should not be used insofar as it has Already been compromised.
Troy Hunt also imagines that service providers will be able to rely on the data to, for example, prompt a person registering a new account not to opt for a password that has been compromised in the past. The idea is not new but it is here on a large scale.
Related:Malware Linux: a Russian sentenced to 46 months in prison
💌 Follow by Email:Digital Channel
🌍🔍 Search Google :digitalchanneltv.tk
Click Index You Might Be Interested
suivre Dhaouadi Aymensur
