Timeline for Why check your email in haveibeenpwned rather than regularly changing your password regardless of any leaks?
Current License: CC BY-SA 4.0
5 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Jan 22, 2019 at 14:34 | comment | added | Tom K. | Credential stuffing is not the risk here. It is a) the leakage of data from an affected account and b) the possibility for an attacker to pivot from one account to another through social engineering. | |
Jan 22, 2019 at 13:45 | comment | added | Nzall | Expiration dates for poorly secured credentials only make sense for the purposes of protecting your other accounts against credential stuffing. And if you use unique and complex passwords in combination with a password vault, credential stuffing is much less likely to affect you. | |
Jan 21, 2019 at 16:18 | history | edited | Tom K. | CC BY-SA 4.0 |
added 227 characters in body
|
Jan 21, 2019 at 16:04 | history | edited | Tom K. | CC BY-SA 4.0 |
added 111 characters in body
|
Jan 21, 2019 at 15:33 | history | answered | Tom K. | CC BY-SA 4.0 |