Phoenix86
Lifer
- May 21, 2003
- 14,644
- 10
- 81
Even your search reveals that a lot of the sites are actually sketchy. Thus, people might be looking for a vetted site. When I saw the 3 zip code thing, I though, "who the heck from my community?! Certainly not the Amish." That leaves the holy rollers. So, now I'd love to search by zip code.
https://haveibeenpwned.com/
So talking about E-mail address I found a sight from Troy Hunt, a Microsoft Most Valuable Professional awardee for Developer Security, blogger at troyhunt.com, international speaker on web security and the author of many top-rating security courses for web developers on Pluralsight that will not only search AM but a lot of hacked sights. You can see what has been hack on this site and search your E-mail.
Apparently some celebrity who signed up for a guaranteed affair, was also tapping a porn star
http://www.foxnews.com/entertainmen...-claims-had-sex-with-josh-duggar/?intcmp=hpff
Hey, at least they were doing that much.http://arstechnica.com/security/201...hley-madison-passwords-could-take-a-lifetime/
Found this really interesting. While password hashes were part of the leak since they were both salted and encrypted with bcrypt the possibility of actually cracking them to find the real password is extremely low and takes an extreme amount of time even with powerful and specialized equipment. Due to AM employing these methods one of the specialists attempting to reveal the true passwords was limited to 156 guesses per second instead of the 7m-11m that would be possible with more common, weaker methods of hashing such as MD5 or SHA1. Kind of a tertiary concern given the nature of this breach (where it's more about simple membership than anything else) but I thought it interesting how effective the hashing could be at protecting the passwords even when exposed and freely attacked.