Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Compromised accounts #2534

Open
Changaco opened this issue Feb 28, 2025 · 0 comments
Open

Compromised accounts #2534

Changaco opened this issue Feb 28, 2025 · 0 comments
Labels
defense protecting ourselves, our users and innocent third-parties

Comments

@Changaco
Copy link
Member

Have I Been Pwned has recently started processing data from publicly available stealer logs in a way that allows a service like Liberapay to find compromised user accounts. I've been waiting for that for a year.

As of today there are apparently 101 stealer log entries for liberapay.com in the Have I Been Pwned database:

Screenshot of Have I Been Pwned

The problem is that accessing the data currently requires paying at least 274 US dollars, which would only give us access for a month, or $2,740 per year for continuous access.

@Changaco Changaco added the defense protecting ourselves, our users and innocent third-parties label Feb 28, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
defense protecting ourselves, our users and innocent third-parties
Development

No branches or pull requests

1 participant