<story><title>LeakedIn</title><url>http://leakedin.org/</url></story><parent_chain><item><author>pbreit</author><text>Now there&apos;s a great idea! Provide your password to some random site purporting to check if your password&apos;s been compromised.</text></item></parent_chain><comment><author>jerf</author><text>&lt;a href=&quot;http://www.inutile.ens.fr/estatis/password-security-checker/&quot; rel=&quot;nofollow&quot;&gt;http://www.inutile.ens.fr/estatis/password-security-checker/&lt;/a&gt;&lt;p&gt;(BTW, be sure to type some gibberish into the provided box and hit submit, so you can see why I think this is a very relevant link.)</text></comment>
<story><title>LeakedIn</title><url>http://leakedin.org/</url></story><parent_chain><item><author>pbreit</author><text>Now there&apos;s a great idea! Provide your password to some random site purporting to check if your password&apos;s been compromised.</text></item></parent_chain><comment><author>joshuahedlund</author><text>Even if you don&apos;t check the source code to verify that it&apos;s harmless, you should assume your password has been compromised and have already changed it anyway. This just lowers the cost of checking the list and could help us learn more about the compromise.</text></comment>