Hacker News Reader

Comment by rohan1024 | Hacker News Reader

Firefox monitor can tell you if your information was leaked in data breaches. I don't think they have this data set though.

https://monitor.firefox.com/

View on HN

Highly recommended. You can put in multiple email addresses, so you can help monitor your non-technical family members’ info as well.

At this point practically everything about me's available either for free or a few dollars. The only interesting thing left is whether a given password has been compromised. The answer to everything else is "yes, it's been leaked". Been that way for most of a decade at this point, guessing it's the same for most other folks with any modern digital or banking presence whatsoever.

I'm sure there are search engines for it too but I noticed that credit karma can tell you which of your passwords have been associated with your email addresses in data breaches.

Credit Karma is free but the CEO appears to be transparent in how they make money (recommending financial products to you based on what they see in your credit profile).

I am a very suspicious and wary internet user, hardly sign up for any services, but been using Credit Karma for my taxes and light financial monitoring for the last 3 years. Tax Filing was totally free and I got the tax refunds I was expecting. No issues with them whatsoever. I have never gotten any email or other spam as a result of using their service. I am a happy customer, though technically speaking I have never actually given them any money directly.

I agree. At first I got a few emails over a long period of time recommending financial products (credit cards, savings accounts, etc) but I unsubscribed and haven't seen any of those since. The only emails I get now are when something changes on my credit profile (new account, closed account, etc).

This looks like a wrapper around Have I Been Pwned.

It works with that service. They are pretty transparent about that in their documentation.

That's precisely what it is. From[0]:

> Through our partnership with Troy Hunt’s “Have I Been Pwned,” your email address will be scanned against a database that serves as a library of data breaches. We’ll let you know if your email address and/or personal info was involved in a publicly known past data breach.

https://blog.mozilla.org/blog/2018/09/25/introducing-firefox...

Mozilla are now reporting on this data set. Top marks for getting it online so quickly.

Does this cover more leaks than haveibeenpwned.com?

I think it uses it: https://thenextweb.com/security/2018/06/26/mozilla-bakes-hav...

Maybe in the future it will, but it uses Have I Been Pwned. From the FAQ[0]:

How does Firefox Monitor know I was involved in these breaches?

Firefox Monitor gets its data breach information from a publicly searchable source, Have I Been Pwned. If you don’t want your email address to show up in this database, visit the opt-out page.

[0] https://support.mozilla.org/en-US/kb/firefox-monitor-faq#w_h...

IIRC, they use that.

1Password has a similar feature too.

chrome://flags/#password-leak-detection - same thing

can't I search for my phone number?

Reply on news.ycombinator.com