What do you store in Keepass that falls under high security use? Why not just use KP for everything?
Maybe he just prefers the UI of LastPass over KeePass, and is willing to compromise on some security for usability?
I don't talk to anyone. Does that count? :P
One of the biggest measures is not exposing it online like that :)
To take it even one step further, Even I did not exposing anything should I write a comment for questions like this at all?!
Some sort of Privacy Paranoia! :D
I've had to increase my laptop security on two different occasions two totally different ways - I'm looking forward to this thread to fill in some gaps.
~5 years ago someone got into and locked me out of several of my social media and email accounts by 1) me not logging myself out at the end of my session (on their computer), and b) successfully guessing my security questions. This was before MFA was near-standard, so I at least implemented my own version with notifications/email. I then set MFA up as soon as it was available. I've beefed up my security questions and use LastPass as a PW manager (that never remembers me). I also only use my own laptop, or another computer I strongly trust. I also have a backup email and phone contact number.
The second time my laptop was physically stolen from my apartment. Luckily I'm confident my password was strong enough, and there was very little data stored on the machine - everything was backed up and also stored in 'the cloud.' Since then I've moved out and encrypted my HDD. I hope to get a kensington lock soon to try and bolt down the machine if I have to leave it at home. The laptop webcam is also covered.
All the normal stuff (password manager, encryption), plus I unsubscribe from every online service that gets pwned, or is otherwise using bad security practices (like, sends forgotten passwords over email). And yes, that means I can no longer have a Tumblr, LinkedIn, or Adobe account, but these are the breaks.
Two tier network at home: DMZ for consumer stuff, "critical" for work. iPhone over android. Moving to yubikey for auth and code signing. Make sure that second-hand cars we buy don't come with adobe flash.
Still vulnerable to leakage of personal data from many sites, and wilful actions of installed phone apps like airline check in ones. Run 1+ of: Maven, apt-get or brew every single day on that critical development laptop
If I consider where I am most vulnerable, it is in that automated download and execution of developer tools and application libraries, To put it another way: the code I've written over the years runs on thousands of developer boxes every day. These people are relying not just on my competence, but my goodwill and the quality and detail of the peer review process in those OSS projects.
I've physically removed the webcam, microphone, hard disk, and bluetooth/wifi chip out of my laptop. I boot the machine with a USB Tails w' persistent encrypted volume. I will be disabling Intel's Management Engine firmware a la hackaday.io once my Beagleboard arrives.
Sorry to answer with a question, but how does encrypting your hard drive affect your software development environment, VMs etc.? Does it make things slower?
Recently started using Tor/Signal/ProtonMail, 2FA.
AFAIK it has no effect on read speed, and very slightly slows down write speed, but not noticeably.
Whats a poop sheet?
I got a aluminum baseball bat in my room, althought i think its for softball. Two-step verification and secondary email account and phone number. Linux (Debian) my main OS. Is it weird that i don't trust password managers? i mean, i rather memorize the passwords, even if there are a lot. I use AdBlock, but im guilty of whitelisting some of my favorite content creators.
All in all pretty average, could be better, could be worse.
I do almost nothing, and it's terrible. I should know better.
I've recently started using uBlock Origin. I used Adblock Plus before that, but that was to avoid seeing & loading ads, not to protect myself. Installing uBO was intended as a security & privacy measure.
Use different passwords for each service
Keep software up-to-date
Only use a single card for online purchases, hidden behind Paypal
Use Single Sign On (SSO) for a secondary social media account, rather than my primary email address
Do not use public computers for access
Encrypt hard drives
Do not put anything online that I do not want there
Notifications on accounts so that I know what is going on with my account at all times
2 factor authentication where possible
Lie uniquely when forced to answer security questions. But, record those lies in a safe place (encrypted password manager works). (Bonus: It's always fun to tell a service rep. that your high school mascot was the cockroach.)
I use a password manager, I think my phone's encrypted.
Private Internet Access! DUDURU DUUUU
Body Guard.... Just kidding I'm not the queen.
I don't know most of my passwords. Password manager to keep, and autogen.
Keep updated software. Ad Block. NO FACEBOOK GAMES!
I use LastPass (it helps me to keep not forgetting credentials of both my personal stuffs and at work stuffs).
Taped webcam, encrypted hard drive on my notebook.
Riot and wire instead of Whatspp
choco install unchecky
I love dev.to
We're a place where coders share, stay up-to-date and grow their careers.
We strive for transparency and don't collect excess data.