SIGforum.com    Main Page  Hop To Forum Categories  The Lounge    Platform security perceptions
Page 1 2 
Go
New
Find
Notify
Tools
Reply
  
Platform security perceptions Login/Join 
The success of a solution usually depends upon your point of view
posted Hide Post
quote:
Originally posted by Pipe Smoker:
quote:
Originally posted by SpinZone:
<snip>
No passwords are stored on ANY device
<snip>

You use the same few easily remembered passwords for all accounts?
You have a sheet of passwords taped to your monitor?

I have a PW Manager app (mSecure) on my iPhone and MacBook – they sync. A different long strong PW for every account. Including IRS, LOGIN.GOV, and ID.me. And many other accounts too.



Absolutely not.
I share a PW among a few emails except for the one i use for my financial accounts. That one has a unique PW.
I have 4 financial accounts and 2 account with CC attached. They each have a unique PW. The key is to take a phrase and convert it into a complex password that is easy to recall.
Everything else doesn’t matter. My steam account, occulus, postimage? The risk is nil.

PW managers are great, until they get hacked. I would argue that my mother's little book of passwords she kept in her desk was at less risk then anything kept on-line. It was also a lifesaver when she passed.



“We truly live in a wondrous age of stupid.” - 83v45magna

"I think it's important that people understand free speech doesn't mean free from consequences societally or politically or culturally."
-Pranjit Kalita, founder and CIO of Birkoa Capital Management

 
Posts: 4423 | Location: Jacksonville, FL | Registered: September 10, 2010Reply With QuoteReport This Post
His Royal Hiney
Picture of Rey HRH
posted Hide Post
I use a password manager that authenticates the page I'm asking to provide my password and username to. For credit cards, I just let my password manager control the password completely; I don't care is someone hacks into my account and pay off my credit care balance for me. For accounts that I have my money, I manually append additional character string to the one my password manager knows so that if anyone hacks my password manager account, those critical accounts can't be accessed with just the stored password.

Since you're retired and possibly travelling, I have my process that before I cross into international borders, I delete my social media, shopping accounts, critical financial accounts, and any apps containing critical private information off my phone. Border officials have the right to access everything on any electronics device you bring into their country.

I have a travel account (Trippit) that is free to use that automatically keeps my flights and hotel reservations and everything else I want to add. When I'm in the country, I can download the apps I need.

I don't need a border agent using Zelle to send himself money from my account using my phone.



"It did not really matter what we expected from life, but rather what life expected from us. We needed to stop asking about the meaning of life, and instead to think of ourselves as those who were being questioned by life – daily and hourly. Our answer must consist not in talk and meditation, but in right action and in right conduct. Life ultimately means taking the responsibility to find the right answer to its problems and to fulfill the tasks which it constantly sets for each individual." Viktor Frankl, Man's Search for Meaning, 1946.
 
Posts: 21704 | Location: The Free State of Arizona - Ditat Deus | Registered: March 24, 2011Reply With QuoteReport This Post
Void Where Prohibited
Picture of WaterburyBob
posted Hide Post
I do not use the same ID (account) or password across multiple sites. Every ID/Password is a unique set.
I actually do keep a small card holder with IDs and passwords in my safe.

All important sites use two-factor identification.

I know the ID and password for my bank, and in an emergency my other financial sites can verify me by phone (voice recognition).

No IDs or passwords are stored on any of my devices.
Since Last Pass got hacked years ago, I won't use a password manager.
Yes, the cards are old fashioned, but my accounts/passwords won't be hacked online. It's a minor inconvenience.

I do not use QR Codes at all.

I have no financial or payment information on my phone, so there's no problem if that is lost, damaged or stolen.



"If Gun Control worked, Chicago would look like Mayberry, not Thunderdome" - Cam Edwards
 
Posts: 17110 | Location: Under the Boot of Tyranny in Connectistan | Registered: February 02, 2005Reply With QuoteReport This Post
Member
Picture of konata88
posted Hide Post
quote:
Originally posted by Rey HRH:
I use a password manager that authenticates the page I'm asking to provide my password and username to. For credit cards, I just let my password manager control the password completely; I don't care is someone hacks into my account and pay off my credit care balance for me. For accounts that I have my money, I manually append additional character string to the one my password manager knows so that if anyone hacks my password manager account, those critical accounts can't be accessed with just the stored password.

Since you're retired and possibly travelling, I have my process that before I cross into international borders, I delete my social media, shopping accounts, critical financial accounts, and any apps containing critical private information off my phone. Border officials have the right to access everything on any electronics device you bring into their country.

I have a travel account (Trippit) that is free to use that automatically keeps my flights and hotel reservations and everything else I want to add. When I'm in the country, I can download the apps I need.

I don't need a border agent using Zelle to send himself money from my account using my phone.


Wow, I didn't know that about border officials. Never encountered anything like this before. How did you find out about this?




"Wrong does not cease to be wrong because the majority share in it." L.Tolstoy
"A government is just a body of people, usually, notably, ungoverned." Shepherd Book
 
Posts: 14785 | Location: In the gilded cage | Registered: December 09, 2007Reply With QuoteReport This Post
Honky Lips
Picture of FenderBender
posted Hide Post
quote:
Originally posted by konata88:
Good to know I can continue to use icloud email even if I stop using apple devices.

I've never heard of MFA apps. I'll need to look it up. If one is averse to google, then what are good MFA app alternatives?


I use proton products whenever possible
https://proton.me/authenticator


_____________________________________________
Proverbs 3:31 "Envy thou not the oppressor, and choose none of his ways."
 
Posts: 9299 | Location: Great Basin | Registered: July 24, 2009Reply With QuoteReport This Post
His Royal Hiney
Picture of Rey HRH
posted Hide Post
quote:
Originally posted by konata88:
quote:
Originally posted by Rey HRH:

Since you're retired and possibly travelling, I have my process that before I cross into international borders, I delete my social media, shopping accounts, critical financial accounts, and any apps containing critical private information off my phone. Border officials have the right to access everything on any electronics device you bring into their country.

I have a travel account (Trippit) that is free to use that automatically keeps my flights and hotel reservations and everything else I want to add. When I'm in the country, I can download the apps I need.

I don't need a border agent using Zelle to send himself money from my account using my phone.


Wow, I didn't know that about border officials. Never encountered anything like this before. How did you find out about this?


Watching Border shows on YouTube for Canada, Australia, and UK. That’s how they catch people entering on tourist visas while planning to work or how someone will meet them to get the “package” they brought into the country.

While I’m not so worried about entering the U.S., border agents can require you to provide access to all your electronic devices that you bring in.

Link For the U.S., it’s supposed to be rare. The question is: do you want to take chances.

I imagine just about every other country has a provision for this. Those country, I don’t want them to access my social media accounts and financial accounts.



"It did not really matter what we expected from life, but rather what life expected from us. We needed to stop asking about the meaning of life, and instead to think of ourselves as those who were being questioned by life – daily and hourly. Our answer must consist not in talk and meditation, but in right action and in right conduct. Life ultimately means taking the responsibility to find the right answer to its problems and to fulfill the tasks which it constantly sets for each individual." Viktor Frankl, Man's Search for Meaning, 1946.
 
Posts: 21704 | Location: The Free State of Arizona - Ditat Deus | Registered: March 24, 2011Reply With QuoteReport This Post
  Powered by Social Strata Page 1 2  
 

SIGforum.com    Main Page  Hop To Forum Categories  The Lounge    Platform security perceptions

© SIGforum 2026