• Moderators, please send me a PM if you are unable to access mod permissions. Thanks, Habsy.

Best of the internet

jGu7m1X.jpg
 
www.securitymagazine.com

47% of all internet traffic came from bots in 2022

A new report reveals that in 2022, 47.4% of all internet traffic came from bots, a 5.1% increase over the previous year.
www.securitymagazine.com www.securitymagazine.com

Takeaways:

- The internet is so, so full of automated fuckery it's crazy. If you're not using vpns, good scan tools, etc, you're playing a pure numbers game for security
- If you're on an iPhone, you're being heavily heavily targeted for scams, data theft, etc.
- Don't use simple passwords, use a password vault of some sort to keep track of your complex passwords...12.5% of all password entry attempts are hack attempts ffs.
 
MindzEye said:
www.securitymagazine.com

47% of all internet traffic came from bots in 2022

A new report reveals that in 2022, 47.4% of all internet traffic came from bots, a 5.1% increase over the previous year.
www.securitymagazine.com www.securitymagazine.com

Takeaways:

- The internet is so, so full of automated fuckery it's crazy. If you're not using vpns, good scan tools, etc, you're playing a pure numbers game for security
- If you're on an iPhone, you're being heavily heavily targeted for scams, data theft, etc.
- Don't use simple passwords, use a password vault of some sort to keep track of your complex passwords...12.5% of all password entry attempts are hack attempts ffs.
Click to expand...
I've always felt like the vault is too risky. Keep all your passwords in one place so that a hacker only needs to break into one in order to know all?
 
LeafOfFaith said:
I've always felt like the vault is too risky. Keep all your passwords in one place so that a hacker only needs to break into one in order to know all?
Click to expand...

Breaking real encryption is very, very difficult. It's also incredibly difficult for them to crack complex passwords. So they don't really bother, they focus on the low hanging fruit of dummies who don't understand how the internet works and either use simple passwords they can brute force, or click on links they shouldn't and give away information they shouldn't in phishing attacks.

Basically, if you're not a complete dummy and your passcodes aren't brute force hackable, you're safe from all but the most sophisticated experts who aren't really interested in people like us.

The problem with using passwords that can be remembered without the use of a vault is that you're probably using 1 passcode for multiple accounts because remembering multiple complicated passwords is just not something the human brain is particularly good at, especially if you're changing your passwords at regular intervals (3-6 months) like you should be. So if you get phished with that 1 passcode to rule them all, someone has all of your shit now, or close. Get phished and have different complex passcodes for every site? You're probably okay as long as it wasn't a financial website (and if you don't have your financial stuff on 2FA in 2023......dude)
 
I hate that I have to remember so many passwords, so I have a few patterns that I use, and if I forget, oh well, forget password option is always there. Used to be that your password was your password unless you forgot it or changed it, but now most sites seem to be forcing password changes on you, and with these requirements of one capital, one number, one punctuation mark, it feels safe enough. In fact, it annoys the shit out of me that a couple of them do the 2FA on every single login.

My business bank is super anal about security, more than any other. Used to be they had a token that you needed to spit out a code every single time you wanted to log in. So there was literally this little gadget you had to have physically on you in order to access your accounts. Now at least they updated that to be a mobile token, so you have it in an app, but pretty much safe difference, they just let you toss the physical one.
 
LeafOfFaith said:
My business bank is super anal about security, more than any other. Used to be they had a token that you needed to spit out a code every single time you wanted to log in. So there was literally this little gadget you had to have physically on you in order to access your accounts. Now at least they updated that to be a mobile token, so you have it in an app, but pretty much safe difference, they just let you toss the physical one.
Click to expand...

Yeah, this is 2FA. 2FA can either be using a physical key, or electronic key.

The beauty of password vaults is that they work hand in glove with your web browsers. You don't have to remember your passwords, they're just there whenever you need to access the websites on your devices. The only security weakness at that point is if someone gains physical access to your devices, but there are ways to get around that (don't use face detect or finger print...those can obviously be used if you're physically incapacited...Jamal Khashoggi being a famous example, use a pattern swipe)
 
Last edited:
MindzEye said:
Yeah, this is 2FA. 2FA can either be using a physical key, or electronic key.
Click to expand...
The funny thing is, before, with the physical token, you would just press a button on it and it would give you the code you needed to include online with your regular password. Now, with the mobile token, there's an extra password you need to remember for it to spit out the code, which you then use with your regular password.
 
There are systems one can come up with to help remember passwords, but in the end I figure one book with everything written down is ok...,if they've found the book I'm probably dead anyways.
 
You must log in or register to reply here.
Back
Top