Hacker News new | ask | show | jobs
by JohnMunsch 1018 days ago
If this were my project I think I would provide some reassurances that the site doesn't keep records of project names or results and that none of it will be used to register accounts.

Several domain search websites over the years have been credibly accused of using info gleaned from searches to pre-register domains and accounts in order to take advantage of user's information.

1 comments

It's a valid concern, but i can't see how i can approach that, because in the end with this running on my server i can be watching in many ways.

I think the best option here is to maintain a cli version, that's something i've been thinking about.

You could use something similar to the k-anonymity approach from haveibeenpwned: https://blog.cloudflare.com/validating-leaked-passwords-with...