161–170 of 197 posts
Earlier quoted context omitted.
Good luck https://www.zdnet.com/article/academics-turn-ram-into-wifi-c...
Wow, that article has a huge list of "data exfiltration channels" that are possible attack vectors. This is an interesting problem, and I hope that I'm somehow able to trust again.
Earlier quoted context omitted.
Well, you gain privacy from corporations. You have to keep your software up-to-date, though, or you risk losing privacy to hackers.
Or you can simply run an application level default-deny firewall and never use a web browser. You don't need to keep your software up-to-date in a homelab.
Earlier quoted context omitted.
Lawyer yes, safe deposit hell no. Three reasons: - Banks fubar safe deposit boxes all of the time, in a variety of ways. - Once the bank figures out that you’re dead, it’s sealed without a court order. - As you get older it’s more likely that you’ll screw up payments, lose keys or codes, etc. Also, the attorney will advise your loved ones on what they can do. For example, you need a power of attorney for many things.
Never, ever use a safe deposit box at banks: https://www.nytimes.com/2019/07/19/business/safe-deposit-box...
Despite the issues, there are still valid uses for a safe deposit box. I live in a highly fire-prone area and keep a backup drive with family photos and documents in a safe deposit box in a local place that won't burn when I do.
Earlier quoted context omitted.
This is why I have so far avoided password managers: single point of failure. What if you forget your master password. Or worse - what if your master password is stolen?
... or what if you are traveling and your phone and laptop are lost or stolen?
Obviously there's sometimes you have to break that rule, but I find it takes a lot of stress out of privacy issues for me.
Earlier quoted context omitted.
I just wrote up instructions for accessing my backups for my wife and friend, and my critical accounts have dead-man switches to give my wife access to everything she would need. Assuming what she needs is access to my email (yes) and gigabyte of photos from my drunk college days (no).
What are you using for a deadman switch?
Earlier quoted context omitted.
I forgot my master password two days after. I thought I had stored it someplace and my guess the phone shaked after typing the master key and it undid the characters. FML moment. Spent a week resetting passwords. I only set passwords once. We use bitwarden. It was a pretty fuckery.
This is why I have so far avoided password managers: single point of failure. What if you forget your master password. Or worse - what if your master password is stolen?
Earlier quoted context omitted.
Shamir Secret Sharing could be the answer you're looking for... I'm sleeping better at night here's a quick blog post I wrote with my plan. The app is trivial to write if you find a library for your preferred language https://g3rv4.com/2022/04/a-plan-for-my-secrets
If you lose your memory you better have instructions written clearly on paper not some app which you won't remember how to build or install
Earlier quoted context omitted.
Never, ever use a safe deposit box at banks: https://www.nytimes.com/2019/07/19/business/safe-deposit-box...
>Never, ever Despite the issues, there are still valid uses for a safe deposit box. I live in a highly fire-prone area and keep a backup drive with family photos and documents in a safe deposit box in a local place that won't burn when I do.
https://abc7news.com/archive/8973198/
Note the police are not classifying this as a criminal case (theft), but a civil case.
I struggle a lot with this. Secure isn't a binary state, it's a spectrum. At the same time, what is my risk model? Are my NSFW activities THAT interesting? What about my personal notes that contain health details? I keep an inventory of stuff in my home. Is that ok to keep in Dropbox? Sure the government can access it.. but even if a remote attacker does, is that useful to them? And of course, as things get more secu…
What the buyers can actually do with a million dropbox contents I'm not sure. But it's obviously better not to let that happen.
Best defense is the same as securing your home: Don't be the easy target on your block. Even just the bare minimum on all your sites (2FA, good password system, anti-virus on your computer) will stop you from being low hanging fruit.
I'd also love to hear anyone knowledgeable in this area to chime in!