[asherkin]

Originally Posted by edon1337 The thing I don't understand from credential stuffing is where did this virgin get the mass credentials that he used to test from, if it's from Darknet, where did the Darknet get it from, social platform vulnerabilities?

Stick your email address in https://haveibeenpwned.com/.

[edon1337]

Originally Posted by asherkin Stick your email address in https://haveibeenpwned.com/.

Dayum apparently I've been pwned 7 times, but I don't recognize any of these websites

[Mordekay]

The first billion of accounts are a mix from different sites that are not announced separately, so don't wonder why you don't know these sites.

[edon1337]

Originally Posted by Mordekay The first billion of accounts are a mix from different sites that are not announced separately, so don't wonder why you don't know these sites.

And how does this haveibeenpwned.com site know whether my data has been leaked and where?

BTW: A russian guy once tried jacking my Instagram few months ago, and he succeeded, but I restored it anyways with my Outlook. I guess my Instagram was prey of this kind of cyber-attack.

[asherkin]

Originally Posted by edon1337 And how does this haveibeenpwned.com site know whether my data has been leaked and where? BTW: A russian guy once tried jacking my Instagram few months ago, and he succeeded, but I restored it anyways with my Outlook. I guess my Instagram was prey of this kind of cyber-attack.

https://haveibeenpwned.com/FAQs

[edon1337]

Originally Posted by asherkin https://haveibeenpwned.com/FAQs

What is a "breach" and where has the data come from? A "breach" is an incident where data is inadvertently exposed in a vulnerable system, usually due to insufficient access controls or security weaknesses in the software. HIBP aggregates breaches and enables people to assess where their personal data has been exposed.

It doesn't explain how the data got into their hands though.

[asherkin]

Originally Posted by edon1337 It doesn't explain how the data got into their hands though.

People send him dumps of data breaches found on the internet and he verifies them, there is a lot of information on the site and blog about how the process works.

It is a great service and everyone using the internet should sign up for breach notifications.

[edon1337]

Originally Posted by asherkin People send him dumps of data breaches found on the internet and he verifies them

Oh, so that's how it works.

Originally Posted by asherkin It is a great service and everyone using the internet should sign up for breach notifications.

Indeed it is, I'm already updating my passwords to ones that aren't affected.