Weekly Update 383

This post reflects on the controversy around loading credential and spam lists into services like Have I Been Pwned, emphasizing that such lists often lack provenance and remediation paths for affected users; it references recent attention on Naz.API stealer logs and credential stuffing lists and suggests ignoring or unsubscribing if unhappy, while offering links to related items without technical analysis.