Security News > 2020 > August > 'Have I Been Pwned' Code Base Going Open Source

'Have I Been Pwned' Code Base Going Open Source
2020-08-10 18:15

Troy Hunt, the security expert who handles the breach notification website Have I Been Pwned, announced late last week that he is ready to make the code behind the site available in open source.

Hunt now says that the time has come for the project to evolve into open source, especially given the fact that community contributions to Have I Been Pwned have increased significantly recently.

"The philosophy of HIBP has always been to support the community, now I want the community to help support HIBP. Open sourcing the code base is the most obvious way to do this. It takes the nuts and bolts of HIBP and puts them in the hands of people who can help sustain the service regardless of what happens to me," Hunt says.

The move to make the code open source would also addresses concerns regarding the manner in which the service runs, while helping identify people who can help the project evolve, he notes.

"Then there's the privacy side of it all: my own personal data is in those breaches and your data almost certainly is too because there are literally billions of people that have been impacted by data breaches. Regardless of how broadly that information is circling, I still need to ensure the same privacy controls prevail across the breach data itself even as the code base becomes more transparent," he also says.


News URL

http://feedproxy.google.com/~r/Securityweek/~3/03fq0-zUpp8/have-i-been-pwned-code-base-going-open-source