The “Have I been pwned” API, rate limiting and commercial use | Hacker News Reader