Best Practices for Improved Security and Privacy - Revision history

Jeremy at 20:09, 24 January 2020

2020-01-24T20:09:38Z

← Older revision		Revision as of 20:09, 24 January 2020
Line 1:		Line 1:
	=Use Multi-Factor Authentication=		=Use Multi-Factor Authentication=

	Whenever possible, use multi-factor authentication. Most banks and high-profile web service providers (e.g. Google) provide multi-factor authentication mechanisms. Hardware-based multi-factor authentication is the best (See Yubikey). For services that do not support multi-factor authentication natively, you can still use a hardware device with a static key as part of your password.		Whenever possible, use multi-factor authentication. Most banks and high-profile web service providers (e.g. Google) provide multi-factor authentication mechanisms. Hardware-based multi-factor authentication is the best (See Yubikey). For services that do not support multi-factor authentication natively, you can still use a hardware device with a static key as part of your password.<BR>
			* DO NOT use text messages for sending authentication tokens. texting is not, never was, and likely will never be a secure communication channel.


	=Changing Default Passwords=		=Changing Default Passwords=
Line 14:		Line 16:
	=Never Use Your Social Security Number=		=Never Use Your Social Security Number=

	Never use your real social security number as a password or security answer. It is illegal for any company to require you to give your social security number (with a few exceptions, such as credit and background checks).		Never use your real social security number as a password or security answer. It is illegal for any company to require you to give your social security number (with a few exceptions, such as credit and background checks). Any company requesting that information can ask for a PIN instead, but you'll have to contact them to set that up.

			=Never use ANI / Caller ID for Authentication=
			As of January 2020, I encountered a very prominent bank that would authenticate you based on the telephone number their system thinks you called from. This is NOT reliable and NOT secure. You'll have to test this out and hopefully you'll have a better experience explaining to the offending company why this is a problem and getting them to remove it.

	=Never Use Your Fingerprint(s) for Authentication=		=Never Use Your Fingerprint(s) for Authentication=
Line 32:		Line 37:
	* Show Full URL (including HTTP/HTTPS)<br>Set the following:<pre>browser.urlbar.trimURLs = false</pre>		* Show Full URL (including HTTP/HTTPS)<br>Set the following:<pre>browser.urlbar.trimURLs = false</pre>

	=~~Five~~=		=Identifying Online Fraud/Scam Websites=
			Price too good to be true? Probably is.
	~~=Six=~~		Web-based tools:
			* https://www.urlvoid.com/
			* https://www.virustotal.com/gui/home
			Browser plug-ins:
			* Trustpilot
			* Scamdoc
			* Web of Trust

Jeremy: /* Four */

2016-01-12T23:50:54Z

Four

← Older revision		Revision as of 23:50, 12 January 2016
Line 28:		Line 28:
	There are many web browser extensions that can enhance your security and privacy when browsing the web. See my list of recommended [[Firefox_Extensions#Security\| Firefox Extensions for Security]]		There are many web browser extensions that can enhance your security and privacy when browsing the web. See my list of recommended [[Firefox_Extensions#Security\| Firefox Extensions for Security]]

	=~~Four~~=		=Browser Settings=
			==Firefox==
			* Show Full URL (including HTTP/HTTPS)<br>Set the following:<pre>browser.urlbar.trimURLs = false</pre>

	=Five=		=Five=

	=Six=		=Six=

Jeremy at 00:38, 19 November 2015

2015-11-19T00:38:31Z

@@ Line 1: / Line 1: @@
 =Changing Default Passwords=
-Never leave any default passwords unchanged.
+Never leave any default passwords unchanged. This includes, but is not limited to:
 =Using Browser Profiles=

Jeremy at 23:55, 18 November 2015

2015-11-18T23:55:40Z

← Older revision		Revision as of 23:55, 18 November 2015
Line 7:		Line 7:
	To segregate your personal data from the wild west of the World Wide Web, you can use separate browser profiles.		To segregate your personal data from the wild west of the World Wide Web, you can use separate browser profiles.

	=~~Three~~=		=Using Browser Extensions=
			There are many web browser extensions that can enhance your security and privacy when browsing the web. See my list of recommended [[Firefox_Extensions#Security\| Firefox Extensions for Security]]

	=Four=		=Four=

Jeremy at 23:52, 18 November 2015

2015-11-18T23:52:12Z

← Older revision		Revision as of 23:52, 18 November 2015
Line 6:		Line 6:

	To segregate your personal data from the wild west of the World Wide Web, you can use separate browser profiles.		To segregate your personal data from the wild west of the World Wide Web, you can use separate browser profiles.

			=Three=

			=Four=

			=Five=

			=Six=

Jeremy at 23:51, 18 November 2015

2015-11-18T23:51:35Z

← Older revision		Revision as of 23:51, 18 November 2015
Line 1:		Line 1:
			=Changing Default Passwords=

			Never leave any default passwords unchanged.

	=Using Browser Profiles=		=Using Browser Profiles=

	To segregate your personal data from the wild west of the World Wide Web, you can use separate browser profiles.		To segregate your personal data from the wild west of the World Wide Web, you can use separate browser profiles.

Jeremy: Created page with "=Using Browser Profiles= To segregate your personal data from the wild west of the World Wide Web, you can use separate browser profiles."

2015-11-18T23:50:40Z

Created page with "=Using Browser Profiles= To segregate your personal data from the wild west of the World Wide Web, you can use separate browser profiles."

New page

=Using Browser Profiles=

To segregate your personal data from the wild west of the World Wide Web, you can use separate browser profiles.