• 94 Posts
  • 428 Comments
Joined 2 years ago
cake
Cake day: June 16th, 2023

help-circle
  • The thing about this one is no one seems sure of the source (it appears to be from multiple sources, including infostealer malware and phishing attacks), so you don’t know which passwords to change. To be safe you’d have to do all of them.

    Some password managers (e.g. Bitwarden) offer an automatic check for whether your actual passwords have been seen in these hack databases, which is a bit more practical than changing hundreds of passwords just in case.

    And of course don’t reuse passwords. If you have access to an email masking service you can not only use a different password for every site, but also a different email address. Then hackers can’t even easily connect that it’s your account on different sites.


  • A password manager is still a good idea, but you have to not use a hacked one. So only download from official sites and repositories. Run everything you download through VirusTotal and your machine’s antivirus if you have one. If it’s a Windows installer check it is properly signed (Windows should warn you if not). Otherwise (or in addition) check installer signatures with GPG. If there’s no signature, check the SHA256 OR SHA512 hash against the one published on the official site. Never follow a link in an email, but always go directly to the official website instead. Be especially careful with these precautions when downloading something critical like a password manager.

    Doing these things will at least reduce your risk of installing compromised software.











  • Every single time I open Teams it pops up a dialogue asking if I want to try Copilot. There’s no “No” option, just “Yes” and “Maybe later”. If you click “Maybe later”, it asks again the next day. One day they’ll just assume “Yes” and not ask.

    And this is at work for a company that had demanded we jam needless AI into all our applications.