Reply to Security consultant needed

Forum Index » Electronics and Technology

Reply to "Security consultant needed "

Subject:

Emoticons





More smilies

Text Color: Font: Close Marks

[quote=Anonymous][quote]I already use LastPass. But I don't know for sure - is it OK to log in at work and use work wifi (I teach at a school) to use LastPass?

Is it OK to use my cell phone to log in to my bank when I am just out and about?

It seems like I'm getting mail daily telling me there's been yet another security breach. Everyone's switching to these 2 factor verification things, and telling me to download apps on my phone and just... it's getting so freaking complicated.
[/quote]

Lastpass (or Bitwarden or any other good password manager) is fine.  If you are really paranoid, don't put entire passwords into it.  Have a standard prefix or suffix that you remember that you add to every password and don't put that into the password manager.  That would make it much harder for someone with access to the password manager to compromise your accounts.  And, of course, keep the master password safe.

I don't have an opinion on using cell phones for banking.  I don't personally like the idea and don't do it, but I haven't investiaged the security implications.

Work wi-fi is OK if it's authenticated (either with a pre-shared key or login (802.1x)).  Public (unauthenticated) wi-fi is generally kind of scary, and I would recommend against it  for sensitive stuff like banking.  It makes a man-in-the-middle attack pretty easy.  No doubt this happens all the time in places like airports and hotels.

In general, I recommend using web sites rather than apps from mobile devices.  Apps can collect things like location data that web sites can't, and many app owners will sell these data for revenue.  It might be "anonymized," but probably no one else in the world has the same travel/location patterns as OP, and it would be pretty easy to identify the person based upon movement patterns   If this were to be compromised, it could be very useful for someone who wanted to, say, rob the house of a particular person.

This is where being a high-value target matters.  A truly high-value target or paranoid person probably shouldn't be carrying a mobile device at all (or should be using a disposable one and replacing it regularly and changing the number).  Location data are very useful for nefarious activities.  Same for things like purchasing transactions.  Use cash rather than credit/debit cards when possible for in-person transactions to avoid revealing your location.  If I had a list of all of your in-person purchases for a week, I could probably pretty easily find out who you are, where you live, where you work, what you like to eat, what your hobbies are, and other sundry details of your life.  This would be useful information to the criminal-minded.  This may sound super-paranoid, but credit-card data breaches are not all that uncommon.[/quote]

Options

	Disable HTML in this message
	Disable BB Code in this message
	Disable smilies in this message

Review message

Search Recent Topics Hottest Topics