Crumb
c/cybersecurity · by Jerry@hear-me.social · 1y

Password reuse is rampant: nearly half of observed user logins are compromised

Password reuse is rampant: nearly half of observed user logins are compromised

https://blog.cloudflare.com/password-reuse-rampant-half-user-logins-compromised/

#CyberSecurity

10 points · 2 comments · view on lemmy.world

2 Comments

scottwilson@infosec.exchange · 1 pts · 1y (1 reply)

@Jerry@hear-me.social How would Cloudflare know this, unless they are intercepting and LOOKING AT credentials and otherwise HTTPS-encrypted traffic?

Cheradenine@sh.itjust.works · 4 pts · 1y

I'm no fan of Cloudflare, but did you read the article?

As part of our Application Security offering, we offer a free feature that checks if a password has been leaked in a known data breach of another service or application on the Internet. When we perform these checks, Cloudflare does not access or store plaintext end user passwords.

They then go on to say they hash them and compare the hash to a db.

It's an interesting read