Karmaos at 00:29, 18 June 2025

2025-06-18T00:29:23Z

Karmaos: added tools and heuristics

2025-06-17T23:38:36Z

added tools and heuristics

@@ Line 1: / Line 1: @@
-===== Heuristics =====
+* '''Divide accounts.''' Come up with random e-mail account names for personal use. Create separate accounts for financial transactions, social media registrations, and general purposes.
-* '''Do not share your info''': Never provide your passwords, usernames, bank account details, and personal information to people who approach you via phone or email. This could be a scam attempt to steal your money, or to access personal information that can be then used to extort you.
+* '''Do not share your info with strangers''': Never provide your passwords, usernames, bank account details, and personal information to people who approach you via phone or email. This could be a scam attempt to steal your money, or to access personal information that can be then used to extort you.
-* '''Do not download promoted software:''' One of the worst things you can do is downloading a remote desktop application that provides full access to and control of your personal computer to someone else. These attempts may be presented as security software against a virus or a supposed hacking attack. In any case, if you have been contacted by someone who supposedly wants to warn you of a hacking attack and to help you deal with it, it is most likely a hacker themselves.
+* '''Do not download software by uncertain sources:''' One of the worst things you can do is downloading a remote desktop application that provides full access to and control of your personal computer to someone else. These attempts may be presented as security software against a virus or a supposed hacking attack. In any case, if you have been contacted by someone who supposedly wants to warn you of a hacking attack and to help you deal with it, it is most likely a hacker themselves.
-* Use secure connections (HTTPS):
+* '''Use secure connections (HTTPS).'''
-===== Tools =====
+==== Tools ====
-* '''Surveillance Self-Defense:''' In our daily life, we use multiple devices and software, all of which may share some common potential risks, while some may have specific aspects that create further vulnerabilities. An excellent and rich resource is the Surveillance Self-Defense (SSD; [https://ssd.eff.org/ https://ssd.eff.org/)]. A website, funded by the Ford Institution, which contains multiple guides on how to enhance one's digital security and privacy. It contains basic principles guides ([https://ssd.eff.org/module-categories/basics basics]), security-enhancing tool guides ([https://ssd.eff.org/module-categories/tool-guides tools]), various guides for using popular devices like [https://ssd.eff.org/module/how-to-get-to-know-iphone-privacy-and-security-settings iPhones] and [https://ssd.eff.org/module/how-to-get-to-know-android-privacy-and-security-settings Androids], as well as chatting services like [https://ssd.eff.org/module/how-to-use-whatsapp Whatsapp] and [https://ssd.eff.org/module/how-to-use-signal Signal] in a secure way. It even includes a [https://ssd.eff.org/module-categories/security-scenarios set of plausible security scenarios] and how one should act in each case.
+* '''Leak detectors''': [https://haveibeenpwned.com/ haveibeenpwned.com], [https://spycloud.com/ SpyCloud], [https://passwords.google.com/ Google Passwords] - with these services you can find if your email or other personal data have been found in databases that were leaked after a hacking attack.
-===== Operational Security (OpSec) =====
+==== Websites - Guides ====
-The above recommendations comprise a concise set of tools, websites, and heuristics that people can use to enhance their digital safety and privacy no matter their individual level of risk. However, it can be argued that some of these are useful for everyone while for others their value depends on the specific risk levels that each person faces. The approach of OpSec suggests that one should first <u>evaluate their actual risk levels</u> and then <u>decide which countermeasures should be used</u>. As an illustrative example from physical reality, the necessary level of home security varies widely based on where one lives and their specific personal details that may render them more or less vulnerable. A farmer who lives in a small farmer village with a stable population where everyone knows each other might not even need to worry about shutting their front door, while a rich celebrity who lives in a big city with high crime rates will have to invest heavily in expensive and complex alarm systems, security personnel and dogs, etc. This example illustrates that increased safety often comes at economic cost (e.g. most trustworthy VPNs are not free), it can make everyday life more complicated (2-factor authentication makes accessing a website or an app more time-consuming), and sometimes it can lead to different types of risks that would not have occurred otherwise (forgetting one's password for their IronKey hardrive or zip file used to lock a crypto wallet can lead to the permanent loss of access to the wallet, like the [https://www.nytimes.com/2021/01/12/technology/bitcoin-passwords-wallets-fortunes.html infamous story of Stefan Thomas, the man who lost 7,002 Bitcoins]). Similarly, the OpSec principles argue that...
+* '''Surveillance Self-Defense:''' In our daily life, we use multiple devices and software, all of which may share some common potential risks, while some may have specific aspects that create further vulnerabilities. An excellent and rich resource is the Surveillance Self-Defense (SSD; [https://ssd.eff.org/ https://ssd.eff.org/)]. A website, funded by the Ford Institution, which contains multiple guides on how to enhance one's digital security and privacy. It contains basic principles guides ([https://ssd.eff.org/module-categories/basics basics]), security-enhancing tool guides ([https://ssd.eff.org/module-categories/tool-guides tools]), various guides for using popular devices like [https://ssd.eff.org/module/how-to-get-to-know-iphone-privacy-and-security-settings iPhone] and [https://ssd.eff.org/module/how-to-get-to-know-android-privacy-and-security-settings Android], as well as chatting services like [https://ssd.eff.org/module/how-to-use-whatsapp Whatsapp] and [https://ssd.eff.org/module/how-to-use-signal Signal] in a secure way. It even includes a [https://ssd.eff.org/module-categories/security-scenarios set of plausible security scenarios] and how one should act in each case.

Karmaos: First input

2025-06-17T17:55:59Z

First input

← Older revision		Revision as of 17:55, 17 June 2025
Line 1:		Line 1:
	~~Here~~ are ~~some resources~~
			===== Heuristics =====

			* '''Do not share your info''': Never provide your passwords, usernames, bank account details, and personal information to people who approach you via phone or email. This could be a scam attempt to steal your money, or to access personal information that can be then used to extort you.
			* '''Do not download promoted software:''' One of the worst things you can do is downloading a remote desktop application that provides full access to and control of your personal computer to someone else. These attempts may be presented as security software against a virus or a supposed hacking attack. In any case, if you have been contacted by someone who supposedly wants to warn you of a hacking attack and to help you deal with it, it is most likely a hacker themselves.
			* Use secure connections (HTTPS):

			===== Tools =====

			* '''Surveillance Self-Defense:''' In our daily life, we use multiple devices and software, all of which may share some common potential risks, while some may have specific aspects that create further vulnerabilities. An excellent and rich resource is the Surveillance Self-Defense (SSD; [https://ssd.eff.org/ https://ssd.eff.org/)]. A website, funded by the Ford Institution, which contains multiple guides on how to enhance one's digital security and privacy. It contains basic principles guides ([https://ssd.eff.org/module-categories/basics basics]), security-enhancing tool guides ([https://ssd.eff.org/module-categories/tool-guides tools]), various guides for using popular devices like [https://ssd.eff.org/module/how-to-get-to-know-iphone-privacy-and-security-settings iPhones] and [https://ssd.eff.org/module/how-to-get-to-know-android-privacy-and-security-settings Androids], as well as chatting services like [https://ssd.eff.org/module/how-to-use-whatsapp Whatsapp] and [https://ssd.eff.org/module/how-to-use-signal Signal] in a secure way. It even includes a [https://ssd.eff.org/module-categories/security-scenarios set of plausible security scenarios] and how one should act in each case.

			===== Operational Security (OpSec) =====
			The above recommendations comprise a concise set of tools, websites, and heuristics that people can use to enhance their digital safety and privacy no matter their individual level of risk. However, it can be argued that some of these are useful for everyone while for others their value depends on the specific risk levels that each person faces. The approach of OpSec suggests that one should first <u>evaluate their actual risk levels</u> and then <u>decide which countermeasures should be used</u>. As an illustrative example from physical reality, the necessary level of home security varies widely based on where one lives and their specific personal details that may render them more or less vulnerable. A farmer who lives in a small farmer village with a stable population where everyone knows each other might not even need to worry about shutting their front door, while a rich celebrity who lives in a big city with high crime rates will have to invest heavily in expensive and complex alarm systems, security personnel and dogs, etc. This example illustrates that increased safety often comes at economic cost (e.g. most trustworthy VPNs are not free), it can make everyday life more complicated (2-factor authentication makes accessing a website or an app more time-consuming), and sometimes it can lead to different types of risks that would not have occurred otherwise (forgetting one's password for their IronKey hardrive or zip file used to lock a crypto wallet can lead to the permanent loss of access to the wallet, like the [https://www.nytimes.com/2021/01/12/technology/bitcoin-passwords-wallets-fortunes.html infamous story of Stefan Thomas, the man who lost 7,002 Bitcoins]). Similarly, the OpSec principles argue that...

Karmaos: Intro

2025-05-23T14:14:17Z

Intro

New page

Here are some resources

Resources for IT security - Revision history

Karmaos at 00:29, 18 June 2025

Karmaos: added tools and heuristics

Karmaos: First input

Karmaos: Intro