This is such a nothing burger, they’re using those first five to get partial matches then doing the actual checks locally on the hash…

To be transparent: this check isn't new, it has been part of the Supervisor for years. It checks app options that are marked as passwords. A recent release fixed the warning that surfaces it, which is why you're seeing it now. Privacy was a design requirement for this feature from the start, which is why your secrets never leave your system. The Supervisor hashes them locally and sends only the first 5 characters of the SHA-1 hash to Have I Been Pwned. HIBP returns every hash starting with that prefix, and the matching happens on your own instance. You can see exactly what it does here: https://github.com/home-assistant/supervisor/blob/main/supervisor/utils/pwned.py. You are right that our documentation should have explained this, including how to turn it off. We'll get that page updated. ../Frenck

Interdigital sure sounds like a patent troll, which is disappointing if they’re getting their claws into the EU courts.

That is a good point and shows how little I know about tanks

It’s also ignoring everything their fellow republicans are doing. Nevermind the secretary of transportations bullshit, local politics is where most of this kind of shit starts. My town put in protected bike lanes (protected only by collapsible plastic rods), and all the Republican f-550 Sherman tank edition truck owners bitched they couldn’t fit their tanks on the roads until they literally ripped them out a few years later.

That is incredibly fucked

There’s almost always connect you to a real person if you type something like “talk to a human”