Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> HIBP was rendered obsolete ever since Chrome had that feature built-in.

A feature that many developers have to disable because you can't make Chrome ignore certain entries for localhost. For local development I have stuff that spins up a server of, let's say a CMS, and it uses the usual default credential "admin/admin". Yes Chrome, I know that this is an insecure password that has been breached, but this is a freaking development system, leave me alone...

The only way to avoid these messages is to disable the feature globally and that option is hidden deep in the extended settings.



Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: