Jump to content

Have I Been Pwned?: Difference between revisions

From Wikipedia, the free encyclopedia
Content deleted Content added
Yobot (talk | contribs)
m →‎top: WP:CHECKWIKI error fixes using AWB (11974)
Hibporg (talk | contribs)
No edit summary
Tags: Mobile edit Mobile web edit
Line 35: Line 35:


As of March 2016, Have I Been Pwned? receives around ten thousand daily visitors and has 350 thousand subscribers, who receive alerts if their email address appears in a new data breach.<ref name=RiseOfHIBP/>
As of March 2016, Have I Been Pwned? receives around ten thousand daily visitors and has 350 thousand subscribers, who receive alerts if their email address appears in a new data breach.<ref name=RiseOfHIBP/>

As of March 20th 2016 the Have I Been Pwned? brand and name are now in dispute with the guys responsible for the .org incarnation of the service taking hold of the brand/name by way of a Copyright of Trademark application.


== History ==
== History ==

Revision as of 20:35, 20 March 2016

Have I Been Pwned?
HIBP's logo, which shows a common SQL injection attack string
Type of site
Internet security
OwnerTroy Hunt
URLhaveibeenpwned.com
CommercialNo
RegistrationOptional
Launched2013; 11 years ago (2013)

Have I Been Pwned? (abbreviated HIBP) is a website that allows internet users to check if their personal data has been compromised by a security breach of any websites or services they use. The service collects and analyzes dozens of database dumps and pastes containing information about hundreds of millions of leaked accounts, and allows users to search for their own information by entering their username or email address. Users can also sign up to be notified if their email address appears in future dumps. The site has been widely touted as a valuable resource for internet users wishing to protect their own security and privacy.[1][2][3] Have I Been Pwned? is run by security expert Troy Hunt.

As of March 2016, Have I Been Pwned? receives around ten thousand daily visitors and has 350 thousand subscribers, who receive alerts if their email address appears in a new data breach.[4]

As of March 20th 2016 the Have I Been Pwned? brand and name are now in dispute with the guys responsible for the .org incarnation of the service taking hold of the brand/name by way of a Copyright of Trademark application.

History

Troy Hunt, creator of HIBP, giving a talk on application security at OWASP's AppSec EU conference in 2015.

Have I Been Pwned? was created by Australian web security expert Troy Hunt in late 2013. Hunt was inspired to create the site while analyzing data breach trends, as he realized breaches could greatly impact users who might not even be aware their data was compromised. "Probably the main catalyst was Adobe," said Hunt of his motivation for starting the site, referring to the Adobe Systems security breach that affected 153 million accounts in October 2013.[4]

Initially, the site allowed users to enter their email address and see which (if any) data breaches included records related to that address. Later,[when?] the site also added monitoring for pastebins, which allows many data breaches to be automatically detected and added to the site's database.

In July 2015, following the Ashley Madison data breach, Hunt added functionality by which breaches considered "sensitive" would not be publicly searchable, and would only be revealed to subscribers of the email alert system.[3] This functionality was enabled for the Ashley Madison data, as well as for data from other potentially scandalous sites, such as AdultFriendFinder.[5]

See also

References

  1. ^ Woollaston, Victoria (9 December 2015). "Have I been PWNED? Site reveals if your email address was leaked". Mail Online. Retrieved 18 March 2016.
  2. ^ Seltzer, Larry (5 December 2013). "How to find out if your password has been stolen". ZDNet. Retrieved 18 March 2016.
  3. ^ a b Price, Rob (20 August 2015). "HaveIBeenPwned.com lets you see if you're in the Ashley Madison hack leak". Business Insider. Retrieved 18 March 2016.
  4. ^ a b Coz, Joseph (10 March 2016). "The Rise of 'Have I Been Pwned?', an Invaluable Resource in the Hacking Age". Vice. Retrieved 18 March 2016.
  5. ^ Hunt, Troy (29 July 2015). "Here's how I'm going to handle the Ashley Madison data". troyhunt.com. Retrieved 18 March 2016.