Comment on Project Svalbard, Have I Been Pwned and its ongoing independenceparentComments−Thorentis6yYeah, so it's nothing but branding. There is nothing about this site that requires trust, since the data is already available. HIBP got popular on Twitter / the internet and is now a well known name in cyber.−Gigablah6yWell, to be pedantic, it's not just a simple SQL query, it's also a percolation query server and notification system.It's like saying that Pingdom is nothing more than a cron job.−DreamSpinner6yThe reason that trust is important could be to do with verifying breaches.In some of his articles discussing various breaches, he mentions reaching out to selected (potential) victims to verify some of the details.Doing that does require a fair amount of trust by various victims of the people asking to verify.If I was randomly contacted to verify some details in a breach, I'd be skeptical it was a phishing scheme.If I was randomly contacted by Troy Hunt / HIBP - then I'd look at it much more seriously.
Comments
Yeah, so it's nothing but branding. There is nothing about this site that requires trust, since the data is already available. HIBP got popular on Twitter / the internet and is now a well known name in cyber.
Well, to be pedantic, it's not just a simple SQL query, it's also a percolation query server and notification system.
It's like saying that Pingdom is nothing more than a cron job.
The reason that trust is important could be to do with verifying breaches.
In some of his articles discussing various breaches, he mentions reaching out to selected (potential) victims to verify some of the details.
Doing that does require a fair amount of trust by various victims of the people asking to verify.
If I was randomly contacted to verify some details in a breach, I'd be skeptical it was a phishing scheme.
If I was randomly contacted by Troy Hunt / HIBP - then I'd look at it much more seriously.