Someone should make a list of all the leaked credentials that got leaked.
Comment on God ****** dammit, here we go again
Wispy2891@lemmy.world 4 days agoIt’s exactly how it worked. A company called synthient made a master list with all the leaked emails + all leaked passwords. Then they were hacked and it leaked
ExLisper@lemmy.curiana.net 4 days ago
felixwhynot@lemmy.world 3 days ago
I think that’s HIBP basically?
MrScottyTay@sh.itjust.works 4 days ago
But then nothing has changed if they were just collating what was already leaked.
ChogChog@lemmy.world 3 days ago
Synthient wasn’t hacked, as a security company, they aggregated tons of stealer logs dumped to social media, Telegram, etc.
They found 8% of the data collected was not in the HIBP database, confirmed with some of the legitimate owners that the data was real.
They then took that research and shared it with HIBP which is the correct thing to do.
I was also thrown off by the title they gave it when I first saw it, a security company being hacked would be a terrible look. but they explain it in the article. Should probably have named it “list aggregation” or something.
Wispy2891@lemmy.world 3 days ago
so why hibp calls them data breach??? Ultra misleading, almost defamation, everyone including me only reads the headlines