Hacker News Reader

"Clicking the Check Password button will call out to Troy’s service and let you know if your password exists in his database."

Wow, what a bunch of jerks. They didn't download the torrent and host the password database themselves for their commercial product? They instead make use of Troy's resource he's making available on his own dime.

"Thanks Troy" indeed.

View on HN

The cost of this is actually paid for by Cloudflare as they've donated CDN services to aggressively cache the API response, of which there is only 1 million possible responses.

Plus in the comments they say it was only implemented this way to save time (it was done within 27 hours of Troy's service being announced) and Troy has publically supported this use.

Thanks for that explanation. It seemed like a real abuse of Troy's good will. I still hope they plan to migrate to their own hosted database quickly and not overstay their welcome.

Reply on news.ycombinator.com