2023 Security Check-up Reminder

[Adam Jensen]

Rule number one of the internet: don't click the thing they told you to click.

kek that's like the third "Rule number one of the internet" that I heard.
The other two are "Never feed the troll" and "Do not talk about /b/"

 

[Generic Retard]

@Null A small suggestion if I may. When using two-step verification with email codes after entering username and password full e-mail is shown:
View attachment 4753773
Maybe it would be good to obscure it in some way if it's not too much work on your part.

On this Matter: Xenforo also shows "User not found" if you mistype the username.

If only the PW is wrong, it shows this

Pretty shitty for a commercial software tbh.
But everyone should be registered with an email that's not used somewhere else anyway...

 

[George Floyd]

Fuck you pink join date cunts shitting up this site with your vile presence,

There's been a million times old accounts were wiped or had their passwords reset and we're encouraged to have alts, the join dates mean nothing

 

[Tarlach]

Some Minecraft playing faggot got their whole site blown open, huh? Blockland bros, we're back...

Kill yourself on god

 

[AnOminous]

There's been a million times old accounts were wiped or had their passwords reset and we're encouraged to have alts, the join dates mean nothing

Anyone who has been here for years and acts like these faggots is even dumber than if they were new and acted like that.

 

[DrNow]

Having a password manager has been a game changer for me. Different e mail addresses for everything and pass phrases rather than passwords. It’s up there with a VPN in terms of essentials to use the Internet. Having no social media gives me peace of mind too.

Anonymity is an asset in this era of the Internet. Things are the worst they’ve ever been, between state censorship and people willingly handing information over to data harvesting schemes like facebook. It pays to be paranoid.

Better to learn from other peoples mistakes than your own.

 

[BillTheButcher]

kek that's like the third "Rule number one of the internet" that I heard.
The other two are "Never feed the troll" and "Do not talk about /b/"

All are important, but some should take precedence over others. Getting butthurt and engaging with a troll just leads to feeling like a fool; what it doesnt do is get you doxed/nudes leaked.

That's only if you REALLY piss someone off, and even then you'd still be back to the "don't click the thing" rule anyways.

 

[AnOminous]

All are important, but some should take precedence over others. Getting butthurt and engaging with a troll just leads to feeling like a fool; what it doesnt do is get you doxed/nudes leaked.

That's only if you REALLY piss someone off, and even then you'd still be back to the "don't click the thing" rule anyways.

Depends on the troll. Some will do it just for shits and giggles.

 

[Mimiga]

If you store passwords in your browser you are a retard.
If you sync everything with Google you are a retard.
If you don't clear your cookies and history you are a retard.
If you don't use throwaway emails you are a retard.
If you use your real name you are a retard.
If you re-use the same password and/or username you are a retard.
If you don't do IRL business inside a private window or on a separate device you are a retard.
If you don't have a separate IRL email you are a retard.
If you don't analyze every executable you download you are a retard.
If you don't keep sensitive info on your drive encrypted you are a retard.
If you don't use KeePass with TOTP you are a retard. (Why pay shekels to Bitwarden or LastPass for what you can have for free?)

This is 1999 basic level opsec, figure it out already.

 

[Mr. Donuts]

I use Kapersky Password Manager. to open the bank, I have to use a password written on paper.

 

[Terrorist]

Diceware

Remember LastPass? Yeah, I fucked her.
UGUUUSH

 

[George Floyd]

If you don't clear your cookies and history you are a retard.

Why? Are you scared of your mom or something?

 

[Mimiga]

Why? Are you scared of your mom or something?

Glow harder

 

[Quickfix]

P.S. always separate your work from your personal computer!!!

Browsers and general opsec yes, but different computers requires seperate devices. Most normies just getting into this will have a "mixed" device and so will anyone broke. There are probably a lot more broke teens to 20 somethings into internet drama than middle-aged people who tend to have a larger disposable income.

Even if you do get a new device after you still have to seperate everything on the old one and the things easiest to transport and use tend to be the most expensive ones like light weight laptops and most people would not just dedicate something they paid so much for to work.

 

[Frans]

Not reusing usernames and having multiple emails also goes a long way to keeping you safe in the long run, so if you ever get compromised it will be much harder to track your other things but I'll assume this was already mentioned

 

[Roland TB-303]

I know Apple gets shit on a lot around here but they’ve got most of the security features Null mentions in the OP inbuilt. They’ve got a password manager stored behind biometrics, a hidden email service you can use to create random and unique emails for every site you sign up to and there’s also a VPN in beta. I wouldn’t use the VPN just yet though, every time I test it it leaks my DNS. Apple may not be the best but they’ve told the FBI to get fucked before after asking them to break into a suspects phone. Some security is better than none I guess, just a tip for Applefags.

 

[InteracialBowelSyndrome]

This is why I don't allow swearing in my Christian Minecraft server.

 

[Alligator Alcatraz]

Having a password manager has been a game changer for me. Different e mail addresses for everything and pass phrases rather than passwords. It’s up there with a VPN in terms of essentials to use the Internet. Having no social media gives me peace of mind too.

Anonymity is an asset in this era of the Internet. Things are the worst they’ve ever been, between state censorship and people willingly handing information over to data harvesting schemes like facebook. It pays to be paranoid.

Better to learn from other peoples mistakes than your own.

Agreed. Same here. I also try to lower the amount of accounts I make and avoid saving data as much as possible. I keep an eye on Bleeping Computer for recent hacks and data breaches. It's horrifying how often big name companies are attacked, but worse is how others are affected.

CISA warns of actively exploited Plex bug after LastPass breach

CISA has added an almost three-year-old high-severity remote code execution (RCE) vulnerability in the Plex Media Server to its catalog of security flaws exploited in attacks.

www.bleepingcomputer.com

AT&T alerts 9 million customers of data breach after vendor hack

AT&T is notifying roughly 9 million customers that some of their information has been exposed after one of its marketing vendors was hacked in January.

www.bleepingcomputer.com

Chick-fil-A confirms accounts hacked in months-long "automated" attack

American fast food chain Chick-fil-A has confirmed that over 71,000 customers' accounts were breached in a months-long credential stuffing attack, allowing threat actors to use stored rewards balances and access personal information.

www.bleepingcomputer.com

 

[Don Yagon]

sneedforo doesn't exist so no, stop bothering me

I see what you did there.

 

[Null]

That also doesn't exist. I'm trying to rebase the entire project on Scylla while reimporting all my old code. I'm making decent progress and it gives me an opportunity to clean up.