Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How to encrypt your entire life in less than an hour

medium.freecodecamp.com

Post reply on HN
Print view View original

11–20 of 70 posts

Re: How to encrypt your entire life in less than an hour

#11

Post by lorenzhs »

nemo1618 wrote: post #4

Isn't 2FA considered dangerous now? We've seen how susceptible it can be to social engineering. On a related note, I noticed that my Windows Phone displays text message notifications even when it's locked... So adding a PIN doesn't prevent an attacker from doing 2FA if they have access to my phone.

2FA with a hardware token (U2F, Universal Second Factor) is the safest method. It has built in phishing protection, and sites can't track the token (no unique ID). It's really nice and I use it a lot but carrying around a token on your key ring makes it a hard sell for the general public.

Re: How to encrypt your entire life in less than an hour

#13

Post by sp332 »

nemo1618 wrote: post #4

Isn't 2FA considered dangerous now? We've seen how susceptible it can be to social engineering. On a related note, I noticed that my Windows Phone displays text message notifications even when it's locked... So adding a PIN doesn't prevent an attacker from doing 2FA if they have access to my phone.

That notification behavior is a default, but you can change it if you want your messages to be more secure.

Re: How to encrypt your entire life in less than an hour

#17

Post by nommm-nommm »

llamataboot wrote: post #7
b2600 wrote: post #3

Earlier quoted context omitted.

Re: Tor. It's very effective but users must read the documentation not just plug and play.

What do you think most users get wrong when they do it "plug and play". What steps does reading the documentation have you do that makes it safer?

IIRC the docs say not to change the default window size to prevent tracking based on window size.

Re: How to encrypt your entire life in less than an hour

#20

Post by noja »

nemo1618 wrote: post #4

Isn't 2FA considered dangerous now? We've seen how susceptible it can be to social engineering. On a related note, I noticed that my Windows Phone displays text message notifications even when it's locked... So adding a PIN doesn't prevent an attacker from doing 2FA if they have access to my phone.

> Isn't 2FA considered dangerous now?

SMS 2FA is weak, but either better than no second factor or worse depending on your situation. Use a TOTP app like FreeOTP or Google Authenticator for good 2FA.

> I noticed that my Windows Phone displays text message notifications even when it's locked

On Android you can disable that, even per app. Maybe Windows can do that too.

Post reply on HN