cybersec — Notes and Useful Info

Articles Index and Hashtags

Sat, 03 Oct 2020 16:05:24 +0000

Note: keep this at top of blog list by updating it's date in post metadata. Blog Index 01: Articles Index and Hashtags Page 1 02: Apps 03: MathJax quirks/issues in Write.as 04: WSL 05: Search Test 06: Custom Javascript/CSS Coding 07: Text-Only Sites 08: DMV Tests 09: Nextcloud 16.04.1 Install on Debian 9 10: Nextcloud Docker Notes 11: Notes Page 2 12: Nextcloud Notes 13: WA WF Code Examples 14: Phone Tips 15: Cosmology-Followup 16: Blogs Posts 17: Fediverse Followup 18: Tech Followup 19: Priority To Do 20: write.as usage notes 21: WriteFreely info, setup, and config Page 3 22: Win1809 23: Science Projects Ideas 24: Git 25: MathJax and LaTeX 26: Latest Cosmology Results 27: WebDev 28: CyberSecurity links 29: Linux 30: e6430 31: Android Dev Page 4 32: Cloudready 33: Winlinks 34: Ideas for More Secure or Anonymous Payments Online 35: Python 36: Test Post 37: Physics Links 38: CMB 39: Cosmology

CyberSecurity links

Tue, 25 Sep 2018 19:14:15 +0000

Application Security Resources, by Paragonie A serious issue with aescrypt

Myth-busting TOR

Google made the Titan Key to toughen up your online security | Google Wants You to Use Physical Security Keys So Bad It's Willing to Sell You One |

Protect against phone and SMS 2FA vulnerabilities: https://www.howtogeek.com/358352/criminals-can-steal-your-phone-number.-heres-how-to-stop-them/ https://www.howtogeek.com/310418/why-you-shouldnt-use-sms-for-two-factor-authentication/ https://www.howtogeek.com/358803/what-to-do-if-you-lose-your-two-factor-phone/

Cryptomator and Java | Cryptomator review | Cryptomator.org |

Dan Goodin and Brian Krebs on the inadequacies of SMS-based 2FA https://arstechnica.com/information-technology/2018/08/password-breach-teaches-reddit-that-yes-phone-based-2fa-is-that-bad/ https://krebsonsecurity.com/2018/08/reddit-breach-highlights-limits-of-sms-based-authentication/
https://twofactorauth.org/

Let's Encrypt article

Q: For the uninformed, what's wrong with pbkdf2? [reddit thread] A. Outdated, doesn't use memory hardness to prevent easy GPU based cracking, difficulty per attempt for crackers is unintentionally half that of the difficulty for normal users (a quirk in the math makes is more efficient to batch compute a large number of these hashes than in normal usage)

Hashtags: #cybersec

Ideas for More Secure or Anonymous Payments Online

Mon, 24 Sep 2018 23:15:07 +0000

Privacy.com | Amolith's messages on Privacy.com | Lock down and protect your money.

Using your real card number everywhere online leaves you vulnerable. Just one security breach can expose your card number for thieves to make unauthorized purchases.

When you use the Privacy card, you are protected. At every place you shop, you get a unique card number that only works at each individual merchant. So if your card number becomes exposed, it can’t be used anywhere else.

a service that lets you create anonymous “burner” cards for purchases where you might normally use a debit or credit card. You add funds to your Privacy account and create single-use or multi-use cards with or without a spending limit. Numbers, expiration dates, and security codes are automatically generated. When giving your information to the merchant, you can provide whatever information you want and Privacy will confirm it. They operate as any other provider (Visa, Mastercard, etc.) and charge the vendor a fee for every transaction so the service is completely free for users. -—

Pre-paid Credit Cards – found at almost every drug store and supermarket, simply load it by paying cash upfront. The card number is untraceable and when using it to pay online, you can use any name you want. Some disadvantages: 1. require a minimum loading amount (usually $10 – $20) 2. some have a maximum loading amount 3. charge a fee (usually less than $5) 4. and in most cases, they cannot be re-loaded (even if they could, the method of re-loading could then be tied back to you) https://top.quora.com/How-do-I-pay-anonymously-online https://www.cogipas.com/anonymous-online-payments-explained-how-to-pay-anonymously/

Tags: #cybersec