Protecting Basecamp from breached passwords
https://m.signalvnoise.com/protecting-basecamp-from-breached-passwords/ [m.signalvnoise.com]
2019-02-20 02:06
We started by checking that our users aren’t already caught up in a number of high profile, widely available data breaches. We went straight to the source: we scanned the data breaches themselves for user emails, extracted any associated plain-text passwords, and securely checked whether they match user logins.
Increasingly common practice.