Meet the Other Phone. Flexible and made to last.

Meet the Other Phone.
Flexible and made to last.

Buy now

Please or to access all these features

Feminism: Sex and gender discussions

Cyber security resources

1 reply

haXXor · 17/06/2018 01:36

I was going to type up a how-to guide for securing your accounts and making it harder for TRAs to hijack your social media accounts and "out" you. However, Noah Kelley over at Hackblossom already did a great free how-to and Violet Blue also wrote a really helpful cybersecurity book dealing with the threat models that women face that you can get on Kindle or in paperback for under a tenner. Just carrying out Blue's "Nine Privacy Tips To Use Right Now" along with adding two-factor authentication for any accounts you have that support it and using a password manager instead of reusing your password across sites, will make it so much more difficult for the TRAs to get you.

What I will discuss briefly are some things not discussed in either Kelley's guide or Blue's book:

  • When you email someone, or post on a private forum, or text someone, you lose the power to secure your words. Even if you trust that the email recipient or other forum users won't intentionally leak your words, if their email box is broken into or their forum account is hijacked, your words are vulnerable. In short, the emails you send are only as secure as the recipient's password.
  • If you email a lot of people at once, put their email addresses in the BCC field, not the To field. Put your own email address in the To field. The email addresses in the BCC field can't be seen by the recipients. If you have any moles on your list, using the BCC field protect the genuine people from having their email address outed to the mole.
OP posts:
haXXor · 17/06/2018 02:10

Also, I'm going to suggest that, when you set up "sock puppet" email accounts for e.g. twitter, the email account that password reset requests are sent to doesn't contain your name. I just logged into one of my Gmail socks and the first thing I saw was a message asking me to confirm that my password reset email adress was still [email protected]. So I'll be fixing that pretty sharpish, because if someone guessed the password for that sock and logged in, they'd know my name.

When you use a service like Facebook that lets users search for you by your email address, don't use the same email address that you use for Twitter. If someone guessed your Twitter password, gets that email address, and searches for you on Facebook, they now have your name and a list of all your friends.

OP posts:
New posts on this thread. Refresh page