Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

They don’t publish the data itself they just compare a hash of it to a hash of whatever you submit for comparison.


Right, but they have to look at that data to create those hashes, no?


No, you submit your own hashes or partial hashes.


I think donw was talking about the much more gray-area part of HIBP: obtaining the lists of leaked passwords, in order to hash each one and store the hashes.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: