Collaborate Disseminate
Maybe I’m misunderstanding the purpose of k-anonymity, but I don’t see the why HIBP uses it when checking user passwords.
This website, which explains HIBP’s implementation of it, says, "The client will then truncate the hash to a pre… Continue reading Why does HIBP use k-anonymity when checking passwords?
The Modrian algorithm has no knowledge of the inherent hierarchies and structures of data. By using manual SQL one could do the following mapping:
Berlin, Hamburg, Munich -> Germany
London, Manchester, Glasgow -> United Kingdom
While… Continue reading In which case would one use the Modrian algorithm for (minimal) k-anonymization over SQL?
I have manually scraped multiple pages of search results on Google and haven’t found a single suggestion as to how to find an optimal k when you are trying to "k-anonymize" your dataset. All I can find is the obvious fact that &q… Continue reading How choose a k for k-anonymity?
I have manually scraped multiple pages of search results on Google and haven’t found a single suggestion as to how to find an optimal k when you are trying to "k-anonymize" your dataset. All I can find is the obvious fact that &q… Continue reading How choose a k for k-anonymity?
I have encountered the term "sensitive attribute" multiple times when reading up on the concept of k-anonimity — but the texts never formally define what this term means.
Take this example of a k-anonymized table from Wikipedia:… Continue reading What is the definition of "sensitive attribute" in the context of k-anonimity?
People are naturally skeptical when they hear about the HaveIBeenPwned pwned passwords search, because who would in their right mind enter their password into a random website? And sure, HIBP uses k-anonymity to make sure they don’t know y… Continue reading How to explain "the k-anonymity model used by HaveIBeenPwned for pwned passwords doesn’t expose your passwords" to a layman?
Google’s released a Chrome extension, Password Checkup, that’s designed to warn users when they enter a username and password the company has detected in a data breach. Continue reading Chrome extension warns users their login credentials have been breached
Have I Been Pwned? (HIBP) has revealed a huge cache of breached email addresses and passwords, which it has named Collection #1. Continue reading Vast data-berg washes up 1.16 billion pwned records
Mozilla has formally launched Firefox Monitor, a privacy-engineered website that hooks up to Troy Hunt’s Have I Been Pwned? (HIBP) breach notification database. Continue reading Firefox Monitor starts tracking breached email addresses