Mozilla bakes ‘Have I Been Pwned’ into Firefox’s new privacy tool

CyberTech

Level 44
Thread author
Verified
Top Poster
Well-known
Nov 10, 2017
3,247
Mozilla today announced an exciting new feature coming to future versions of Firefox. The feature is a proposed security tool that uses Troy Hunt’s ‘Have I Been Pwned‘ (HIBP) database to scour the web looking for accounts included in known data breaches.

We first learned of a similar feature last November, when Mozilla announced it would be alerting users when their accounts were breached by pulling from the freely accessible breach API on HIBP. This feature was merely a notification system that alerted users when they visited a breached site.

Now, Mozilla is packing the full power of Hunt’s HIBP service into a secondary site, called Firefox Monitor.

The partnership will allow users to enter an email address to see if their account was part of a known breach. If so, Firefox Monitor will let them know the extent of the personal data exposed, as well as offering recommendations on how to secure their account. Mozilla is also considering a service that would notify people when new breaches include their submitted data.

For now, the system is still very much in the planning and testing phases. Mozilla is working with HIBP and Cloudflare to create a method of anonymized data sharing to ensure each users’ privacy is respected, as is the handling of their submitted data.

The plan is to begin rolling out the Firefox Monitor tool next week to around 250,000 users (mainly in the US).

If successful, the plan is to make the service available to all Firefox users down the road.
 
Last edited by a moderator:

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top