Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Do you manage your family's digital safety?

news.ycombinator.com

Post reply on HN
Print view View original

31–40 of 132 posts

Re: Ask HN: Do you manage your family's digital safety?

#31

Post by vorpalhex »

BrandoElFollito wrote: post #28
vorpalhex wrote: post #26

+ Family 1Password so everyone can securely manage passwords and share logins + Network is covered by pihole (and in exchange, plex/jellyfin/etc access works nicely) + Smart home stuff is managed by me. Everyone has admin rights but shared terminals (eg kitchen panel) are unpriviledged users. + Everyone has a home directory on the homelab they can back up to with as much space as they want (4tb+). I help them set it…

This assumes some kind of knowledge your users have. I install whatever I can to control/centralize the devices of my wife and parents. The less they know the better. Because your know, I am the 24/7/365 all-knowing support. I do not do this with my teen kids. They can manage their stupid themselves. Until recently I had them tracked in Google maps but not anymore. They do see me though.

> The less they know the better.

I have found the opposite to be true. If I push them to invest and understand, they are more likely to fix their own problems. I play tech support very infrequently and usually it's just initial onboarding - "Hey, how do I watch movies?"

My users can reset their own passwords, reboot devices, and some of them can even restart stuff on the server.

There's a dashboard with all of our links, so I don't get the "What's the url for..." stuff.

I keep quick docs in the family notes.

Usually my only problem makers are game servers since those are always a bit less than stable once loaded up with mods.

Re: Ask HN: Do you manage your family's digital safety?

#32

Post by BrandoElFollito »

croutonwagon wrote: post #19

I use bitwarden for my families account. My wife has her own that i setup and got working on her phone/browser. I wish she used it more but she DOES use it for the "org" account and shared info (cc, passwords etc). Email i use on a gsuite legacy domain and have for a very long time. It allows us to move email around if needed. We still have some older gmail accounts as backup, but rarely use them. Ill probably move t…

You must hurry with the Google apps domain, they are closing the grandfathered accounts 1st of June.

Mine was almost 20 years old.

Re: Ask HN: Do you manage your family's digital safety?

#33

Post by tlb »

bsedlm wrote: post #17

I don't. my family is all adult individuals so we all do whatever we want and are able. I do not go around imposing my beliefs upon them. They have their own problems to be bothered with mine too.

If you have high-value info to protect, you are somewhat exposed if other people in your house are sloppy with security.

Household shared threat models include:

- they download a trojan, it infects your shared printer, and copies all your documents to the bad guys

- their phone is compromised and its microphone listens to your conversations and keystrokes.

These are attacks against high-value targets. If you're just surfing Reddit, you probably don't care. But if you work for a tech company and have customer data or cloud logins on your machine, you should probably care.

Re: Ask HN: Do you manage your family's digital safety?

#34

Post by hi5eyes »

My worry is still web vulnerabilities, opsec

opening a malicious pdf on their main machine or a malicious website

the one time all their sensitive info compromises their main gmail/apple account

How is it even possible to help our extremely vulnerable elderly parents and then our very young family members, nephews, nieces

We've probably all been pwned at least once, and we're the more cautious/aware of the population, how do the helpless even fare? Besides locking them down in the apple eco and idk vetting every file/website they use?

Re: Ask HN: Do you manage your family's digital safety?

#36

Post by morpheuskafka »

tlb wrote: post #33
bsedlm wrote: post #17

I don't. my family is all adult individuals so we all do whatever we want and are able. I do not go around imposing my beliefs upon them. They have their own problems to be bothered with mine too.

If you have high-value info to protect, you are somewhat exposed if other people in your house are sloppy with security. Household shared threat models include: - they download a trojan, it infects your shared printer, and copies all your documents to the bad guys - their phone is compromised and its microphone listens to your conversations and keystrokes. These are attacks against high-value targets. If you're just…

Wouldn't most of these issues be addressed by the company managing their own work-issued laptop, presumably with an always-on VPN and full disk encryption? Same for work phones. Customer data and production cloud credentials should never be on a personal machine, period.

Printer could be an issue, I guess, but most tech jobs don't involve a lot of printing and if they do a USB only printer should be supplied by the company.

Re: Ask HN: Do you manage your family's digital safety?

#37

Post by rsync »

The number one thing that we do is use an assumed name and address (and phone number) for all online interactions.

If it's not a government agency, it doesn't get any real info.

So, for instance, Amazon has a made-up name and our PO BOX and our "junk" number from Twilio.

As I have mentioned here many, many times:

This is possible because VISA/MC do not verify cardholder name. They make it seem like they do and merchants think that they do ... but they do not. You can just enter "Mickey Mouse" and it will work just fine.[1][2]

Lyft, opentable, Toasttab, Apple ... none of them have ever seen our real names or addresses.

[1] This is not true of AMEX - they do verify cardholder name the way people think they do.

[2] There is a very rare, seldom used "verified by visa" step that some online merchants used to use (mostly in Europe) that did verify cardholder name ... but I have not seen it in years ...

Re: Ask HN: Do you manage your family's digital safety?

#38

Post by croutonwagon »

croutonwagon wrote: post #19

I use bitwarden for my families account. My wife has her own that i setup and got working on her phone/browser. I wish she used it more but she DOES use it for the "org" account and shared info (cc, passwords etc). Email i use on a gsuite legacy domain and have for a very long time. It allows us to move email around if needed. We still have some older gmail accounts as backup, but rarely use them. Ill probably move t…

I have already moved to workspace for now. There will be no charges until August or so. And then 50% off through August of 2023. So its....not awesome but gives me breathing room to find an alternative (Or just stay the course).

I will say one gotcha that got me...The dont allow Google Voice for workspace. If youhave a legacy account, even on the gsuite it should be fine, but you cant setup new service. And if you mark the payment account as "individual" you have NO options. If you set it as a business you could get google voice as a paid service.

Payment accounts cant be changed once setup. Which is crazy.

Re: Ask HN: Do you manage your family's digital safety?

#39

Post by kcb »

digitallyfree wrote: post #24

Here we go... All secure tasks like handling of IDs, banking, trading, etc. must be done through managed Linux workstations (Landscape with master image), or managed VDI. Keepass is used to store credentials. There is a network storage accessible only to those workstations containing important documents. A second storage area is avaliable for unmanaged and Windows devices. Windows devices have Group Policy set for up…

Daddy Daddy my friend wants to connect her Ipad to the internet, what's the wifi password? Not fooling me hackerrr
Post reply on HN