Hacker News new | ask | show | jobs
by villgax 1897 days ago
Dont be stupid enough to put your PII here, haveibeenpwned is the only one you should trust, everything else cannot be.
6 comments

Unlike other similar (and often suspicious) websites:

- you do not enter your phone number (or email). You just search yourself (or your close ones) by name, the same way you would Google or Facebook yourself or your friends.

- even if that shouldn't be the only trust signal, we (the folks at NextDNS) work around security and privacy every day for the benefits of the users. And while we are still a startup, we are used by many, including experts in the security industry.

Why should I trust haveibeenpwned either? I know the reputation of the owner of that site, but how is it really different? Is the resource publicly verifiable ? Its just implicit trust we have on the site. Away from HN echo chamber, a regular user can't differentiate various websites. Calling it stupid is a bit too much.
The dump is public and easy to find. If it's legal in your country to do it, dump it and grep for you and your relatives.
That is fine, what I meant is scammers will use this opportunity to grab more data from you under the guise of you checking to see if you old details are present or not & end up giving new PII as well
Did you click the link? You look it up by name.
Not just this one, the others as well which surfaced on HN a few days back
NextDNS is a trusted company IMHO.
> haveibeenpwned is the only one you should trust

Why? Troy is monetising as everyone else.