[lucb1e]

I can't understand the rationale behind tricking people into thinking this is secure.

- A list of (partial) hashes was released

- People start setting up websites where you can compute your hash, this is already a bit dubious

- Now people start setting up websitse where you can check if your password was stolen, effectively sending them a copy of your hash to make sure they got it...

It would not surprise me if one of those tools turn out to also send your unhashed password along.

[route66]

More than that it "educates" people that entering their password into some web form other than the original login page is ok. Because the site says so.

[lucb1e]

Indeed, also a very good point.