Here Is A Simple List of Security Habits That WIll Put You in the Top 0.1%
Here is a list of simple to follow habits that can make a big difference in protecting your privacy and security online.
These practical habits come from Andrej Karpathy @karpathy - one of the leading voices in AI.
>> 1. Use a password manager.
Create a unique, strong password for every account and let the manager fill them in for you. That way, one leaked password won’t unlock your other accounts.
>> 2. Protect important accounts with a security key.
A physical key adds another step to sign-in and is harder to steal than a texted code, which can be vulnerable to SIM-swap scams. See @Yubico
>> 3. Turn on biometrics where useful.
Use Face ID or similar features to protect access to apps such as your password manager.
>> 4. Treat security questions like passwords.
Use random answers and save them in your password manager instead of sharing real personal details.
>> 5. Encrypt your computer’s disk.
Turn on the built-in encryption feature, such as FileVault on Mac, so stolen computer doesn’t make your files easy to access.
>> 6. Be cautious with smart home devices.
Internet-connected gadgets can collect data and create more ways for attackers to get into your home network.
>> 7. Use an encrypted messaging app.
Consider using privacy-focused messaging app Signal @signalapp and turn on disappearing messages.
>> 8. Choose privacy-focused browser and search tools.
Andrej recommends @brave for browsing and Brave Search, with Google as a fallback when needed.
>> 9. Use separate or limited-use cards for online purchases.
This can reduce the impact of a merchant’s data breach and help limit unexpected charges.
>> 10. Avoid sharing your home address.
A virtual mailing address can give you a more private way to receive mail and packages.
>> 11. Be careful with email
Don’t click links in unexpected messages; go to the service’s website directly. Consider disabling automatic image loading to reduce email tracking.
>> 12. Use a VPN
A VPN can hide your IP address from some services.
>> 13. Block ads and trackers.
A DNS-based blocker can prevent many known ad and tracking domains from loading.
>> 14. Monitor what your apps connect to.
A network monitor can show which apps send data online and help you spot unexpected activity.
Stay Private!
The last time I saw a 12% yield was with Anchor Protocol on the Terra chain. Many people ended up losing all their money. I hope history doesn’t repeat itself.
Introducing Earn+: 12% rewards on your dollars in a single tap.
Available now for Pro and VIP users and rolling out to all Ethena Pay users in the coming days.
@DefiIgnas The last time I saw a 12% yield was with Anchor Protocol on the Terra chain. Many people ended up losing all their money. I hope history doesn’t repeat itself.
4 data leaks reported today:
1. Coinbase's vendor Amplitude exposed some users’ contact data (funds unaffected).
2. Bithumb (Korea) had user data leaks.
In TradFi, two securities firms in Korea leaked data:
3. Mirae Asset
4. Daishin Securities
You can't prevent a leak, but you can protect yourself.
Leaked exchange data (names, emails, phone numbers, addresses, ID documents, transaction history) is mostly used for phishing, SIM swapping, and social engineering.
Reduce info you share
- Use a unique email alias for each exchange (SimpleLogin, Apple Hide My Email, etc). A leak then can't be linked to your other accounts, and you can spot which service leaked.
- Share only what's required. Don't add optional profile details.
- Use a dedicated phone number (a VoIP or secondary SIM) for exchange accounts if you can, since leaked numbers are the main route to SIM swaps.
Lock down the account
- Use a unique, long password from a password manager.
- Turn on hardware security keys (YubiKey) or passkeys, or at least an authenticator app.
- Avoid SMS 2FA.
- Enable withdrawal address whitelisting and a withdrawal time lock if the exchange offers them.
- Set up an anti-phishing code, which puts a code you choose in every legitimate email from the exchange.
- Review active sessions and API keys regularly. Delete any API keys you don't use.
- Restrict API keys to withdraw-disabled and IP-whitelisted.
Defend against
- SIM swapping: Ask your carrier to add a port-out PIN or number lock.
- Phishing and impersonation: Assume anyone who contacts you about your account, "security issues," or "refund recovery" is a scammer, even if they know your name, balance, or recent trades.
- Exchange support staff don't ask for your password, 2FA codes, or seed phrase.
- Never click links in emails or texts. Go to the site yourself.
- "Wrench attacks": Leaked addresses plus holdings data have led to real-world extortion and robberies. Don't publicize your holdings, and keep large balances out of anything tied to your home address if you can.
If a breach is announced
1. Change the exchange password and any other account that reused it.
2. Check https://t.co/qtIGFkbaPO for your email address.
3. Revoke API keys and active sessions.
4. Review recent withdrawals and security settings.
5. Watch for phishing emails and texts that reference the breach, because scammers move fast after one.
Stay SAFU! 🙏
CZ, what about Binance offering a 2/3 multisig recovery service for BTC & ETH? 🔐
Users hold 2 keys via independent wallet providers; Binance holds the 3rd as recovery. Lose one key? Recover your funds. Binance alone can't move them.
Self-custody with a safety net. Would you build this? @cz_binance