Imagine if you visited the malicious version of have i been pawned? .

I find it funny that every time I check that site, it says that I've never been pwned. Which is good but also kind of terrifies me, guess I have good security.

I have learned so much from you from your each video. Thank you!!

I remember way back in the day I'm almost positive it was HIBP that you would type the username or email and it would just tell you all the passwords that were leaked. What in interesting time that was as a kid.

super great content as always, thank you so much 👍

Actually it only sends part of the hash and returns all the hashes that match that part, then the javascript on your machine checks all the downloaded hashes for matches. the complete hash of your password doesn't leave your browser (when I checked haveIbeenpwned at least)

You are best inspiration for me bro . 🎉Thanks.

11:38 the line "hack on the code" made me laugh a little bit

Great content as always John! Do you recommend using a local or cloud-based password manager?

Why I always use a 2-factor Authentication... Great vids man...

Your content contains quality education and full information, which is don't teach at f****** college, schools. I found your channel during pandemic situation in 2021. Your every video is great..

Great video. Can you please enlighten us on the same way for exposed credential, impersonating domain, unauthorised code commit, expired certificate?

Thanks for the infos

I both have and never have. Thus far every account that has been snatched was a throwaway with a password like "opensesame" because I knew I was likely to never return, save one. That other one simply being my work email address, not a password or anything else. Some asshole who left decided to leak the emails attached to the NDA list which to non-Admins only contained a list with a pseudonym, primary email address, position within the company, and date signed. Not exactly useful information that was leaked in that non-throwaway case, in other words. Oddly it hasn't even resulted in any spam in the many years since despite being in multiple pastes.

Welcome back 🔙

i have been pwned 18 times and 1 of them is a club penguin remake

Haveibeenpwned is also an interesting source of information about someone. You can find out what sort of accounts a person has just by their e-mail address, and things like political leanings and hobbies can be gleaned this way. Most people have no clue.

This might seem like a stupid question but is salting just never implemented before hashing the passwords?

Imagine having your password hacked in 2021 only to the be personally called out 2 years later in a youtube video by a security researcher. Christ, Julian, get your life together.

when you go on the site, it only gives email format and NOT phone number. How?

Even bcrypt now is crackable quite easily upto 30-35% 10-13 rounds.. 8 rounds and lower are very easily crackable today with -a9 attack.. Now 4090s are being used this probably has a greater found rate.

Thanks

do you need a fqdn for passbold

No entry for Nikon or Phreak? :)

Can I use the API integrates on my WordPress website??

Hardware keys are the way forward.

people shouldn't even be allowed to use password as their password.

Does his PC have the automatic not a robot feature

have u ever thought of 'have i been pwned' do u think they are using that data to hack others?

Does anyone know of a password manager that offers password expiration reminder? Or at least you can order your passwords by expiration date? Keepass somewhat offers something like that, but it is not very user firendly.

BitWarden #1 and KeePass #2. There is no #3.

I got pwned once, but on old information. it was zap-hosting.....

Use a password manager? Like Lastpass? NO THANKS. Use an OFFLINE password manager.

on every gmail account i was pwned only once each for some reason

13 times 😮😮

Fun Fact: According to have-I-been-pwned, the password 123456 has been pwned 37.509.543 times

Did sublime really opened that File :) or choked sublime

For that kid who is sending replies to send a WhatsApp, we are seeing a video on malicious advices and they still do it (probably a bot ngl)

First like Mr.John

👍

you do realise that you can use lister by ghisler to open any enormous file in a matter of milliseconds?

you know what i mean

For what reason did he add FA271 before the hash ?

i havent been pwned :>

Guys, anyone here test linux on allienware, dell xps ? Which one is better

i got pwned some how ?????????????

What do you do if your IP address was leaked?

You took the hash and found a password. Is that possible on a rar zip file? I forgot the password to one of my archives

Nope, I am pretty sure it's Apple at this point.

My Password Was Pwned 340 Times!!!

didnt lastpass get hacked? how do i know what password manager to trust?

1000th like

enough of this cyber bs Ed Sheeran, when is your next song coming?

9:22 was an awful sound and so loud, hence the dislike

Oh look, it's 2013 again 🙄 Unsubscribing!

Imagine if have I been pwned Waa owned by a bad actor, or your CPU, gpu, soc's, router was pre backdoored by some bad actor located next to a country thst rhymes with gallestein. Everything you own is hardware backdoored. The war is already lost.

आइओ🧌🧟🧌🧟🧟😀