General Guidelines and Precautions

Hi lainons. What would be your baseline security advices on the wired? Things that everybody should do for a minimum of defense. IRC, Bewaring of People, Network Security... Everything appreciated.

>>16267 Don't store your passwords online. Use something like KeepassXC to save them, and generate new ones that are 50 characters or longer, generate a new one for each site. If you're using firefox go to ffprofile.com and generate a new profile. Change your macaddress wherever you go. I'm not an expert, but that's what comes off the top of my head.

I'm glad you asked op. Firstly you will want to link every link possible so you can get small viruses. This will start to build up the computer's natural neural networking AI immune system. Second, you will want to show and share all the data possible about yourself in order to prevent blackmail. If all your information and embarrassing nude selfies are already out there then there isn't anything to blackmail you with. You should also turn off your firewall so your computer doesn't over heat and burn your fingers, this is a common mistake people make. Last but not least check the catalog for threads about general do's and don't because we have this fuarrrking thread all the time, and the simple security questions pinned on top of the fuarrrking board.

>>16307 I realize this is a soykafpost, but the first half of this is actually solid advice (to an extent) if you are a masochist who has access to a ML host-based security solution.

Tacking onto this thread, what do people usually recommend for 2 factor? I've been using Authy and some YubiKeys.

100% biggest piece of advice I give people is manage your passwords securely and use 2FA. I agree, KeePassXC is the best password management option, it's what I use. The thing is I don't usually recommend it to normal people, because it's all local it can make setup and use a bit cumbersome if you're not security focused. If you must use an online password manager, I usually recommend BitWarden, since they have good free functionality, they're completely open source (you can even self-host if you know what you're doing), and they don't have a history of selling user data to 3rd parties (as far as we know). As for not recommending KeePass to normal people, the thing is if it's hard for them to use their password manager they might fall back on password reuse or some such bullshit, and a password manager you don't use is utterly useless.

>>16303 >>16359 i currently just store my passwords in the notepad app. is this retarded?

>>16359 I usually recommend masterpassword because it generates the password deterministically, so that losing the database is never a problem. >>16424 yes very. Someone gets on your computer for 2 minutes -> you're owned.

>>16424 very, use keepass and it's password generator.

>>16427 What kind of security benefit will it give?

Encrypt your soykaf. Encrypt your soykaf. Encrypt your soykaf.

>>16428 Keeps your password encrypted in a database on your base system. It will also autogenerate a password that is strong that you don't have to remember you can just copy paste. Just keep a strong passphrase for your keypass. because you can manage all your passwords in one place you don't reuse passwords the most common and dangerous mistake.

>>16430 So it's fine to do it with a text editor if you can make/generate long uncrackable passwords and have full-disk encryption?

>>16359 Is 2FA really a good thing? It’s everywhere lately but I always think it just moves all the vulnerability to your phone. Literally if you steal someone’s phone you have access to their everything now. All of their passwords. Never before did we carry a device with that much vulnerability around us all the time.

>>16432 i kept an old phone just to sit on my desk to do 2FA for stuff i only need to log into when i am at my desk. my normal everyday phone doesnt have anything i care about being stolen on it

>>16431 Not the lain you were talking to but; I'm fairly certain that having a passwd.txt is ill advised because any peice of malware could simply scan your documents or desktop folders for plaintext and then have access to all your passwords. while full-disk-encryption would no doubt help in any situation where people you don't trust have access to your device I don't think it'd be terribly useful in this instance. All that being said, I think if your running any OS with better security than windows -which is basically any OS- then it's not the worst idea, pretty sure things like apparmor would stop any program from having unnecessary access to your user folders but don't quote me on that.

>>16432 I would argue they do 2fa over phone to identify you and nothing more. Links your account to a phone number which is registered on a real name for most. If anyone really cared about security they would support for same as banks - rsa with a tan generator completely sidestepping the malware issue by having a piece of hardware that cant be infected.

>>16462 Security-through-obscurity-wise the malware would just log the keys and steal the password manager database, or present a rigged form/binary to the user and steal everything, while you can name your passwd.txt just dwssap.

>>16486 I know this isn't your point, but it needs to be said: Security through obscurity isn't security. For what it's worth I see your point, but let's face it if they're keylogging they're probably clipboard hijacking as well. Once someone has established a foothold on your system, you're basically fuarrrked, but this isn't the problem password managers are trying to address. The three easiest things you can do with the best immediate return on your persec is: 2fa everywhere hardware token everywhere password manager Of course there is much more that can be done. >>16462 It's pretty mind bending how almost no banks support hardware mfa. (At least none of the ones I've seen) "Bbbbbbbut that's hard for our devs to implement :(((((" - Institution that holds everyone's money.

>>16502 Meant to reply to >>16482 not >>16462

With 2FA I think it's definitely advisable. I think YubiKey and similar stuff is the best, but it's not supported everywhere. Authy doesn't know your phone number, you don't even have to install it on your phone, you could install it on another computer or use it on the same one (use a different master password than your password manager). It can be used pretty much everywhere (except Steam, the fuarrrkers). Also yeah, use a password manager. Easily the best way to go. The biggest vulnerability is a key logger getting your master password, but if you use KeePass they also need your database which is stored locally, so a lot of soykaf would have to go right for them to get access. Then if you use a separate password for your 2FA tokens (or even better a physical key) it just makes it that much more secure.

My two cents. >MFA >KeePass generate passwords at least 12 - 16 chars, alpha numeric and symbols >5 attempts followed by 10 minute lockout on whatever system you can >System firewall >Network firewall >keep your sensitive information stored on safest encryption utility >Keep everything up to date >Clear disconnect between user accounts and admin accounts >virustotal any files you don't get from an offical source >limit the amount of online applications. >check for open ports and foreign connections. Fight me but I think encrypting your systems means you don't clean them up well enough and you have to much to hide. It takes to long too start and is unproductive.

>>16486 not true, just grab that text and copy it over. Then just grep through soykaf or use some software to scan for anything that seems juicy. Just a minor set back if anything.

>>16518 If you use magnetic disks it's also pretty hard on them. I think encrypting partitions for sensitive stuff is the way to go, or use Tails for really sensitive stuff. KeePass databases use 60,000 iterations of AES256 by default, they'd need the database and your password to get in.

>>16307 >Second, you will want to show and share all the data possible about yourself in order to prevent blackmail. If all your information and embarrassing nude selfies are already out there then there isn't anything to blackmail you with. Unironically good advice.

My biggest tip would to be mindful of what you post online. With social media so many people just make their whole lives public information and it boggles my mind. I get paranoid telling online friends my first name or what state I'm from, and some of these people have all their personal info in a nice little paragraph on their public profile description with pictures of their faces, house, school, work, and friends all over their profile, its partly the reason why there's so much doxxing on platforms like twitter. Be careful of even something small like posting a picture you took in your city. >>16307 >This will start to build up the computer's natural neural networking AI immune system. Could this actually work? I don't know much about antivirus software, but this sounds plausible. >>16434 That's really smart, I should start doing this

>>16307 >If all your information and embarrassing nude selfies are already out there then there isn't anything to blackmail you with. this reminds me that story about scientologists trying to get some dirt on creators of south park and ruin them for making fun of scientology, but they gave up because it was pointless

>>16502 >It's pretty mind bending how almost no banks support hardware mfa. (At least none of the ones I've seen) maybe it's an American thing? lots of banks in Europe do support it (mainly tan generators, but there are other options)

>>16669 >Could this actually work? I don't know much about antivirus software, but this sounds plausible. Did they stop teaching context clues in school?

>>16424 at least Vera crypt the file in you really want to keep it in a txt doc >inb4 is coffee good for you

Something less autistic, and more normalf4g-oriented: >keep your personal info to yourself, don't use social media/use only fake info >avoid ordering online, if you can't, use a PO box >use a pre-registered/burner number for your phone, in order to avoid officials to link your phone number and your person together. >Use free SMS receiving services and burner e-mails for verification, keep fake and alt-e-mails around for talking to different people and groups. >If you have to do illegal stuff, like torrenting and such, try to use public WiFi and do some level of obscuration to hide your ass. additional tip: >If you do have the need to route your traffic through a VPN, that means you have to money to buy membership for one. free VPNs are obvious info-collecting pools, and the saying "if you're not being sold something, you are the one being sold" applies here. Paid VPN providers offer an actual service, flexibility and real anonymity, because they don't have to make ends meet by selling out their users or using advertisements for earning money to keep their servers running.

1) don't leave random ports open, especially ssh 2) use a password manager 3) don't use Windows

>>17388>>16267 4)Move to the middle of nowhere 5)Never go outside 6)put dishs and hacked routers around your land to bounce your neighbor internet 7)faraday cage all tech when not in your hands 8) buy a gun

>>16358 Aegis is pretty good

Never use Chinese device. https://www.nksc.lt/doc/en/analysis/2021-08-23_5G-CN-analysis_env3.pdf

>>17387 You went way too hard on the cyberjuice if you think "dont be on social media" is normalfriend compatible advice. A better thing to get them to care about this is to just make them private everything so at least their abusive ex can't snoop on them.