Would also mention that many people think this would be improved if one could have an API which returned http://
user.is_compromised? and if you were hypothetically capable of writing that API I would think *long and hard* about whether you would want people using it.
Ethics of User Compromise Detection API Design
By
–