Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Do you manage your family's digital safety?

news.ycombinator.com

Post reply on HN
Print view View original

11–20 of 132 posts

Re: Ask HN: Do you manage your family's digital safety?

#11

Post by bobkazamakis »

nopcode wrote: post #6

I preconfigure all windows machines in my family, and take away their local admin rights. No crapware installs, no disabling of updates or defender. No microsoft accounts. They get firefox browser with adblocker preinstalled. I manage their important passwords (eg fastmail) and trained them to rely on firefox sync for the recoverable accounts. I use MeshCentral for remote administration (amt)… its amazing for the pri…

a physical jail cell and a faraday cage and you'll only need to tighten the chains a little more!

Re: Ask HN: Do you manage your family's digital safety?

#12

Post by p932 »

E-banking security. Configured a dedicated hardware laptop with default network policy outgoing to denied. Manually configured a very limited set of IPs for the banks sites used (no DNS server allowed, static resolution in /etc/hosts) and OS packages. Second step (or factor) done on a dedicated phone hardware too (no sim card used). Automatic browser startup at session open with tabs open for the banks website.

Been operational for a few years. Minimal maintenance. Great peace of mind.

Re: Ask HN: Do you manage your family's digital safety?

#13

Post by Justsignedup »

- I configure all windows machines at home - Everyone gets adblockers - I configure all android phones at home, everyone gets an adblocker - Everyone runs malwarebytes - Everyone is briefed on these tools and to talk to me when installing rando software - 1password on phone and all computers, everyone should be generating PWs

Re: Ask HN: Do you manage your family's digital safety?

#14

Post by nopcode »

bobkazamakis wrote: post #11
nopcode wrote: post #6

I preconfigure all windows machines in my family, and take away their local admin rights. No crapware installs, no disabling of updates or defender. No microsoft accounts. They get firefox browser with adblocker preinstalled. I manage their important passwords (eg fastmail) and trained them to rely on firefox sync for the recoverable accounts. I use MeshCentral for remote administration (amt)… its amazing for the pri…

a physical jail cell and a faraday cage and you'll only need to tighten the chains a little more!

Two of the four homes already have a faraday cage :)

It was built by a german chemicals company and the reinforced concrete blocks signals.

Re: Ask HN: Do you manage your family's digital safety?

#15

Post by rootusrootus »

I have a 1Password family account for my immediate family, and I let my mother have the fifth license.

My kids get locked down OS's and games, in addition to communications limits and screen time restrictions. But they're elementary age, so this is okay. The rules relax bit by bit as they get older.

For my extended family? Nothin. They're grown ups. I do host the family e-mail domain but there aren't any rules around that (well, they do have to pay for it...). We've had discussions about best practices, but the non-technical folks don't care ("so what if Google tracks me, I don't care") and the other half are technical and more than capable of managing their own digital lives.

Re: Ask HN: Do you manage your family's digital safety?

#16

Post by acwan93 »

arzmir wrote: post #3
blowski wrote: post #2

> What steps did you take to make it simple enough for your family to care? I did the same thing as in the office - embarrassed or annoyed them (in a small way) by using their lack of security. I changed desktop backgrounds, "stole" £20, sent emails with promises like "I'll wash your car" to people. I'd follow this up with a lecture on "if I can do this, imagine what some dodgy foreign hacker could do". Constructivel…

> We have a WhatsApp group where they can ask whether something is dodgy. They don't use it for chitchat, so anything that comes through, I treat urgently. I really like that idea.

Until an older relative uses that same group for something completely unrelated.

Re: Ask HN: Do you manage your family's digital safety?

#18

Post by theycouldsue776 »

"The Personal Infosec & Security Checklist" https://www.goldfiglabs.com/guide/personal-infosec-security-...

Internet safety, DNS security, https://wrdrd.github.io/docs/consulting/kids #internet-safety #family-media-plan #screen-time-guidelines

Rclone supports encryption over top of like every cloud storage provider; and then what js could hit delete and confirm on our cloud storage, resulting in starting over from zero, like preppers, like bushcrafters - with DR bushcraft knives with flints (and hand-crank solar rechargeable FM/WX radio USB powerpacks) - like a low-budget made for TV Swiss Family Robinson: https://wrdrd.github.io/docs/tools#rclone

Ansible-molecule, DevSec baselines; your (1) Raspberry Pi SD card will fail, and probably before a thumbdrive or an SSD.

E2E: Cyph, Keybase has encrypted git repos; GitLab/Gitea does Issues with trackbacks: https://www.cyph.com/blog/cyph-pgp

PWD generates a printable substitution box: https://github.com/westurner/pwd

SGP: SuperGenPass https://github.com/chriszarate/supergenpass

JS implementations of SSS to do better than splitting a string in parts and printing some redundantly: https://github.com/topics/shamir-secret-sharing

"SLIP-0039: Shamir's Secret-Sharing for Mnemonic Codes" https://github.com/satoshilabs/slips/blob/master/slip-0039.m... :

> Shamir's secret-sharing provides a better mechanism for backing up secrets by distributing custodianship among a number of trusted parties in a manner that can prevent loss even if one or a few of those parties become compromised.

> However, the lack of SSS standardization to date presents a risk of being unable to perform secret recovery in the future should the tooling change. Therefore, we propose standardizing SSS so that SLIP-0039 compatible implementations will be interoperable.

Re: Ask HN: Do you manage your family's digital safety?

#19

Post by croutonwagon »

I use bitwarden for my families account. My wife has her own that i setup and got working on her phone/browser. I wish she used it more but she DOES use it for the "org" account and shared info (cc, passwords etc).

Email i use on a gsuite legacy domain and have for a very long time. It allows us to move email around if needed. We still have some older gmail accounts as backup, but rarely use them. Ill probably move to something else, Mail in a box on a linode or protonmail. The problem is i havent found a 1:1 feature, between google voice for voicemail and junk phone #, and contact syncing.

On the network i manage that. Use opnsense with unifi for wifi and a few vlans. We dont have cable, so roku's/ROKU tvs get their own DMZ and we have plex and a few streaming services.

I also help manage my parents network. So they have a pfsense appliance (setup and bought well before all the nonsense) and it has a VPN connection to my house, with a similar Unifi wifi network.

All of our stuff is MFA enabled and i just handled the setup on her phone etc, gave and setup yubikeys etc.

Outside of my parents and wife/family, i dont really get involved. I really dont want to. My in-laws I have helped do things for like setup some wifi extenders etc. But their needs are more simple and dont require the complexity my parents do (that WFH and run a business from home with a larger layout.)

Re: Ask HN: Do you manage your family's digital safety?

#20

Post by jackallis »

bobkazamakis wrote: post #11
nopcode wrote: post #6

I preconfigure all windows machines in my family, and take away their local admin rights. No crapware installs, no disabling of updates or defender. No microsoft accounts. They get firefox browser with adblocker preinstalled. I manage their important passwords (eg fastmail) and trained them to rely on firefox sync for the recoverable accounts. I use MeshCentral for remote administration (amt)… its amazing for the pri…

a physical jail cell and a faraday cage and you'll only need to tighten the chains a little more!

this got me rolling on the floor,lol.
Post reply on HN