alt Hacker NewsI wouldn't be surprised if that integration is outright illegal in EU due to GDPR, thus putting HIBP in trouble for ingesting PII without any legal legitimacy.
And the first reply being "It is not an invasion of privacy" just shows incompetence on privacy topics. It is never a valid answer.
Which is really concerning, for the lead developer of a home automation system that "fights for the fundamental principle of privacy" as per their mission statement.
Replies
deadbunny • today at 9:32 PM
What PII do you think is being sent to HIBP?
nicce • today at 9:24 PM
I am curious thought that how it would be illegal according to GDPR. They are hashed after all, and the same hash is not used for authentication.
➕ show 1 reply
It's certainly an overstep, but just the hash they're sending wouldn't be PII.