<story><title>The best site to find password leaks: Google</title><url>http://www.google.com/search?q=filetype:sql+password+123456+gmail&amp;hl=en&amp;tbo=1&amp;output=search&amp;source=lnt&amp;tbs=rltm:1&amp;sa=X&amp;bav=on.2,or.r_gc.r_pw.&amp;biw=1440&amp;bih=819</url></story><parent_chain></parent_chain><comment><author>oasisbob</author><text>Johnny (&amp;#38; others) have been doing this type of thing for years. The classic collection is here:
&lt;a href=&quot;http://johnny.ihackstuff.com/ghdb/&quot; rel=&quot;nofollow&quot;&gt;http://johnny.ihackstuff.com/ghdb/&lt;/a&gt;</text></comment>
<story><title>The best site to find password leaks: Google</title><url>http://www.google.com/search?q=filetype:sql+password+123456+gmail&amp;hl=en&amp;tbo=1&amp;output=search&amp;source=lnt&amp;tbs=rltm:1&amp;sa=X&amp;bav=on.2,or.r_gc.r_pw.&amp;biw=1440&amp;bih=819</url></story><parent_chain></parent_chain><comment><author>gtank</author><text>Similar, and interesting in the context of LulzSec releases, is @PastebinLeaks on Twitter. It scans Pastebin for a variety of things (mail address lists, PGP keys, SQL dumps, and router configuration files have all popped up so far). They&apos;re not 100% - especially the mail/password dump detection - but it&apos;s definitely catching stuff.&lt;p&gt;&lt;a href=&quot;http://twitter.com/#!/PastebinLeaks&quot; rel=&quot;nofollow&quot;&gt;http://twitter.com/#!/PastebinLeaks&lt;/a&gt;</text></comment>