Pwner pwns Pwnedlist pwnage property, pours pwned passwords Security researcher Bob Hodges has found a critical flaw in PwnedList, an email service that allows users to check if their email addresses have been exposed by prominent hacks. PwnedList checks "commonly circulating lists of accounts and passwords" and lists some 866 million compromised credentials. The parameter tampering …
But that seems like an excellent way to gather people's emails and passwords...
"Roll up, roll up, Ladies and Gentleman. Give ME your emails and passwords and I'll check to make sure they have been compromised by other miscreants."
"Here you go. Has my account been compromised?"
"Well it hadn't been..."
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
