#pwned — Public Fediverse posts

I've been Pwned

@briankrebs

I wonder if you (or anyone else) can explain something to me, if you don't mind?

I've received a notification from the 'Have I been pwned' people:

"You've been pwned in the Synthient Credential Stuffing Threat Data data breach"

I am one of 1.96 billion breached accounts.

I know the email address in the breach, but how do we ever discover which login or password is involved? My passwords are unique (Bitwarden created, I never know what they are). I would like to change the particular login, but I've no way of knowing which it is.

Is there any way to do this?

#pwned #iveBeenPwned #security #password #dataBreach #SynthientCredentialStuffingThreatData #synthient
#EllieKPosts

To manage passwords in #golang, check out the following #gogen packages:

* Generate new #passwords: https://pkg.go.dev/github.com/tecnickcom/gogen/pkg/random.
* Check for #similarity with existing passwords: https://pkg.go.dev/github.com/tecnickcom/gogen/pkg/stringmetric.
* Compare passwords against #compromised ones (#pwned): https://pkg.go.dev/github.com/tecnickcom/gogen/pkg/passwordpwned.
* Secure password #hashing, #storage, and #verification: https://pkg.go.dev/github.com/tecnickcom/gogen/pkg/passwordhash (based on #OWASP Password Storage Cheat advice).

See also: #awssecretcache, #encrypt, #jwt, #redact, #randkey.