Top all-time · #8445
SpyCloud
Company blog · spycloud.com/blogsecurity
SpyCloud is the company blog at spycloud.com, writing about security. Since 2018, 9 different Hacker News readers have linked it 12 times, most often “SpyCloud: A service like “Have I Been Pwnd” but you can see the leaked data”. No feed was found, so read it on the site itself.
Too few sampled comments (7) to say how often HN recommends it.?
Why HN links it
Breach-discovery company whose site and technical write-ups are linked on HN. One commenter found its analysis of a credential-stuffing tool used in the Nintendo account attack interesting. Others posted its job listings.
Summarised by Claude from a sample of 7 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
SpyCloud prevents account takeover, ransomware, and fraud by illuminating identity exposures criminals use. See what attackers see and stop them first with the world’s largest repository of recaptured breach & malware data.
Most-linked posts?
- SpyCloud: A service like “Have I Been Pwnd” but you can see the leaked data2 people · 2 mentions · first linked 2018-04-10
What Hacker News says?
SpyCloud | Austin, TX | Onsite | Full-time | https://www.spycloud.com SpyCloud is a pioneer in breach discovery. We strive to help businesses of all sizes mitigate data breaches by proactively alerting when employee or company assets have been compromised. We accomplish this through our early-warning breach detection service powered by a world-class team of intelligence analysts. We're looking for the following: 1)…
Comment linking /pages/active-directory-protect/
on “Ask HN: Who is hiring? (January 2019)”Submitted State Secrets for Sale: More Leaks from the Chinese Hack-for-Hire Industry as a story · 11 points
HN discussionI'm not here to defend LastPass, but there are some rational answers to the questions you're asking, a lot of them having to do with human psychology. First thing's first, and yes I am "victim blaming" when I say this: 60% of users reuse their passwords. [0,1] It's a widespread problem. Maybe that number is lower for a technical site like HN, but I have encountered technical people who do not practice what they prea…
Comment linking /password-reuse/
on “LastPass users warned their master passwords are compromised”Submitted The Internal Workings of the Chinese Cybercrime Ecosystem as a story · 2 points
HN discussionSpyCloud | Austin, TX | Onsite | Full-time | https://www.spycloud.com SpyCloud is a pioneer in breach discovery. We strive to help businesses of all sizes mitigate data breaches by proactively alerting when employee or company assets have been compromised. We accomplish this through our early-warning breach detection service powered by a world-class team of intelligence analysts. We're looking for the following: 1)…
Comment linking /pages/active-directory-protect/
on “Ask HN: Who is hiring? (February 2019)”Submitted SpyCloud: A service like “Have I Been Pwnd” but you can see the leaked data as a story · 1 points
HN discussionWell there's this https://spycloud.com/
Comment linking /
on “500M of “Have I been Pwned” hashes broken”SpyCloud did an interesting writeup on at least one credential stuffing tool used months ago in this attack: https://spycloud.com/technical-analysis-nintendo-account-che...
Comment linking /technical-analysis-nintendo-account-checking-crimeware/
on “Nintendo said a total of 300k accounts have been hacked”Was browsing [1] the web and stumbled on this, thought it was interesting enough to submit on HN. UPDATE: A friend just told me about spycloud [2] [1] https://github.community/t5/How-to-use-Git-and-GitHub/HaveIB... [2] https://spycloud.com
Comment linking /
on “Leak Database – Find passwords for any email or username”This is a good summary of the NIST recommendations [1, Sec 5.1] found in [2]. Dropbox released a library [3] that's easy enough to configure to add your own black list (e.g., your company name, your public wifi password, etc.) Finally, my recommendation is to enforce same password between laptop and web tools, and use SSO wherever possible. Password requirements: - 8-char minimum and 64-char maximum length - The abi…
Comment linking /new-nist-guidelines/
on “Ask HN: What are some guidelines for good passwords”