#019: Security, pt. 4: Protecting Yourself Online and Offline
It’s a mad, mad world out there on the internet. So here are a few tips to keep you safer when surfing:
Using good, random passwords is quite likely the single best thing you can do to protect your online life. Since us humans are bad at memorising random stuff, and maybe even worse at generating random stuff, what you want to use instead is a password manager. Using one means your online accounts are now protected with long, random passwords, and all you need to do is remember one good password to unlock your manager. The Wirecutter has recommendations for you: The Best Password Managers. And when you’re setting it up, AgileBits, makers of 1Password, have practical tips for choosing a good master password: Toward Better Master Passwords.
More and more online services are offering what’s called 2-Factor Authentication (2FA). The name stems from needing two factors to authenticate – a shared secret (your password), and an additional code from a second secret source. Some sites offer this by sending you a text message with a code, but it’s more secure to use an authentication app that works by generating this code from a shared secret. Having 2FA set up means that even if someone knows your password, they still won’t be able to take over your account, giving you enough time to change your login to something new. Only if the attackers also have control over the device you set up with the second factor would you be in serious trouble. I definitely recommend setting 2FA up for sites that you use a lot, or that can do a lot of damage if you lost your account (like your email provider).
Some sites even support a scheme called U2F (Universal Second Factor). It works similar to 2FA, but instead of setting up a shared secret or a trusted device with a service, you have a small USB key costing about €20 containing a private key that is used to generate the second secret to log you in. Not many sites support it, but if you use Gmail, it does support it, and for many people, it’s the most important account to keep secure.
Another thing you can do is sign up for ’;–have i been pwned? It is a service that notifies you when an email of yours shows up in an online breach – an occurrence that is sadly becoming more and more common. It doesn’t prevent your accounts from getting hacked, but at least you know when you need to change your passwords.
Another important thing to do is keep your software up to date, especially your operating system and browser. Vendors fix security holes all the time, and by not upgrading, you expose yourself to being exploited.
Finally, Ars Technica has a beginner’s guide to beefing up your privacy and security online, and Troy Hunt offers going dark: online privacy and anonymity for normal people.
Other interesting links from around the web:
- Do You Suffer From Decision Fatigue? – Making decisions is hard mental work, and decision fatigue can be a serious problem if your job is making decisions.
- Voronoi diagram of people enjoying a park
- Trent Reznor, In Conversation
🦄 Unicorn Chaser 🦄
Rescue Center Uses AI To Name Their Guinea Pigs. Examples: Popchop & Fuzzable, Buzzberry & After Pie. All of which are excellent guinea pig names.