Self-hosting

3866 readers

1 users here now

Hosting your own services. Preferably at home and on low-power or shared hardware.

Also check out:

founded 3 years ago

MODERATORS

poVoq@slrpnk.net

sam_uk@slrpnk.net

haveibeenpwned alternatives / data? (infosec.pub)

submitted 2 weeks ago* (last edited 2 weeks ago) by Deebster@infosec.pub to c/selfhosting@slrpnk.net

11 comments fedilink hide all child comments

My personal domain has hundreds of aliases - one for each site I deal with. This is great for identifying the source of spam, and I retire any aliases that get spam.

haveibeenpwned.com lets me add a domain, but wants 3912 USD a year to actually tell me which addresses leaked. This is obviously an insane price for a nice-to-have.

Is there an alternative for free or very cheap? A self-hosted tool that would pull down lists would be great, but I suppose those lists aren't public.

you are viewing a single comment's thread
view the rest of the comments

[–] vk6flab@lemmy.radio 3 points 2 weeks ago (1 children)

Interesting.

I see a list of email addresses.

[–] Deebster@infosec.pub 3 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

~~Perhaps that message only shows up if some of the results are from the paid lists. For me, I don't see anything listed beneath, even though 34 addresses match, so I guess nothing's in the free lists.~~

edit: Looks like it's triggered on number of results:

Most domain searches are free. Once a domain has more than 10 breached email addresses on it, searching the domain requires a subscription. There are several ways to either reduce or entirely remove the need to have a subscription:

[–] vk6flab@lemmy.radio 3 points 2 weeks ago

That's interesting, since my list of addresses contains numerous ones that don't exist and nobody here has ever used.