Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by oal | Hacker News Reader

Full thread

oal·

LastPass has a similar service for some of the recent (and not so recent) hacks:

* https://lastpass.com/adobe/

* https://lastpass.com/linkedin/

* https://lastpass.com/lastfm/

* https://lastpass.com/eharmony/

View on HN

If you use LastPass, then their security check will run these checks automatically against all leaks and email addresses:

http://blog.lastpass.com/2012/01/new-years-resolutions-with-...

Thanks for that; I had ignored the Adobe leak, because why would I have created an Adobe account? Turns out I did at some point, so I guess I'm the goat there.

Often you need to create an account or somehow register your email at sites, just to get something very basic, like a free download, or use a feedback form.

This demonstrates nicely why that's a bad idea.

http://www.bugmenot.com/ is useful for such a case, registration required for a download.

I entered my address out of curiosity and it told me I had an Adobe account. I can't remember ever creating one so I tried the password reset process. Adobe tells me there doesn't exist an account under that address.

How is this possible? How did Adobe leak my address if I don't even have an account?

Awesome.

The LastPass checker is really nice. Whats scary is that it found a few other people that had the same password as me.

For the Adobe breach, LastPass also emails you a sample of the password hints of others -- its kind of funny how people remember a certain string.

The crazy thing my simple password was used by 5 other people. Luckily my email password is much more complicated.

Reply on news.ycombinator.com