Freelance Forum - The Community for Independent Professionals

c/cybersecurity-tips

12

zarag17•2d ago

Hot take: I had to choose between two-factor authentication methods after a close call

Last month I almost got my gaming account hijacked on Steam, so I finally had to pick between using an authenticator app on my phone or getting a physical security key. I went with the authenticator app because it was free and I always have my phone on me. Has anyone else had to decide between these two approaches and regret not picking the other one?

9

nancyramirez•3d ago

I used to swear by free password managers until I got hit with a data breach last August.

Bitwarden was fine for years, but after that LastPass mess I finally switched to a paid 1Password subscription and the difference in security features like Travel Mode and the secret key is night and day. Has anyone else made the jump from free to paid for something like this?

4

emma_lee22•3d ago

Figured out I was reusing passwords for years after a data breach email

Last month I got an email from haveibeenpwned saying my email was in a breach from 2018. I checked and realized I had been using the same password for my bank account and a random forum I signed up for back in college. Has anyone else had a wakeup call from one of those breach checkers?

22

wesley639•9d ago

My cousin's crypto app steal his info last month

I tried out a new crypto tracking app that a friend recommended to keep an eye on my small investments. Within a week, I started getting weird login alerts from my bank and a credit card I barely use. Turns out the app had some kind of data scraper built in that grabbed my credentials. My cousin lost about $600 before he caught it and shut everything down. The lesson I learned is to never connect a random app to your bank accounts just for convenience. Has anyone else been burned by a seemingly harmless finance tool like this?

1

kim_mason55•11d ago

Wasted $85 on a password manager that didn't even work with my banking apps

I got burned by that budget password manager last month, turned out it couldn't autofill on half my financial sites, so I had to manually copy-paste everything.

25

nathan_kim•12d ago

Hit 500 compromised passwords in my personal leak check list today

I finally got around to checking all my old emails against haveibeenpwned and saw that number hit 500, which really drove home how many different services I've signed up for over 15 years and how many of them got breached, so has anyone else done a full audit and found a stupid high count?

5

the_lucas•12d ago

Paid $120 for a VPN service and it saved my business data last week

I run a moving company and handle all my bookings and customer info online. That VPN blocked a phishing attempt that would've let someone into my client database. Has anyone else here had a cheap monthly service actually prevent a real attack?

16

carr.luna•13d ago

TIL I was saving passwords in my browser for 5 years without thinking

Last month I was helping my mom set up a new laptop and she asked me how to remember all her logins. I opened my browser settings and saw over 200 saved passwords sitting there in plain text. Had a moment where I realized I was doing the same thing since 2019 - just clicking 'save password' without a second thought. What finally tipped me off was a coworker mentioning they got their accounts swiped after a browser sync glitch on a coffee shop wifi in Austin. Does anyone here use a dedicated password manager instead of browser storage?

16

parker_hall5•13d ago

Had a chat with a 15 year old that made me rethink my whole password setup

So my nephew came over last weekend and saw me logging into my bank. He asked why I still use the same password for everything. I said it was a strong one, 12 characters with numbers and symbols. He just laughed and showed me how long it would take to crack it on a simple website. Turns out my "strong" password would only take like 3 hours with a basic GPU setup. I got schooled by a kid who learned this from YouTube. Has anyone else had a younger relative completely change how you handle passwords?

16

emma_lee22•15d ago

Coworker ripped my password habits apart and I'm glad she did

A few months ago at a coffee shop in Portland, a coworker saw me type my password and said 'dude, you're still using something from your college email list?' I had been cycling through three passwords for years, none of them more than 10 characters. She showed me how she uses a password manager with randomly generated 20-character strings for every site. I switched everything over in about three hours that weekend. The hardest part was trusting the manager app itself honestly. Has anyone else had a wake up call about weak passwords from a friend or colleague?

23

beng51•17d ago

I was sure those USB killer devices were just a myth until I saw one fry a coworker's laptop

A guy in our IT department plugged a random flash drive into his work machine and it died instantly - no smoke, just a dead motherboard. Are these really that common now, or was he just unlucky?

12

blair990•18d ago

How I used to treat every email attachment like it was safe, now I scan everything even from friends

My buddy Mike sent me a PDF last Tuesday that he said had his new business card design. I opened it without thinking and my whole system got hit with that ransomware that encrypts everything. Lost about 3 hours of work before I realized what happened. Now I refuse to open anything without checking it first, even if it comes from people I know. Has anyone else had a close call like that from a trusted contact?

25

iris_barnes87•18d ago

Can we talk about using a password manager for home accounts

I finally set up Bitwarden last week after putting it off for maybe 2 years. My problem was I kept reusing the same password for like 15 different sites because I couldn't remember them all. Now I have unique passwords for everything and it took maybe 30 minutes to sort out. Has anyone else had trouble getting their family to switch over too?

8

davidshah•21d ago

Pro tip: Change your router admin password right now if you haven't

I was reading a thread on a tech forum last night where a guy said his neighbor's wifi got hacked because the router still had 'admin' as the login. Made me realize I hadn't touched mine since I set it up 2 years ago. Anyone else still using the default credentials on their home router?

11

viola_garcia56•22d ago

Wasted $250 on a password manager I never really needed

I signed up for a three year plan with Dashlane back in 2021 because everyone said it was essential. Turns out the free features in my browser already did 90% of what I wanted, so I basically paid for a fancy dashboard I looked at twice. Has anyone else dumped money into security tools that ended up being overkill?

11

morganl71•22d ago

Hit 100 phishing test failures in my company last month - that number shocked me

I run the security training for about 500 employees. We do simulated phishing emails every quarter to see who falls for them. Last month's test had a fake email about a free pizza party in the break room. 100 people clicked the link and entered their login. That's one out of every five people. The worst part is we ran the same exact test six months ago and only 60 people failed. So it's getting worse, not better. What kind of phishing test failures are you all seeing in your workplaces?

20

gray314•22d ago

Pro tip: Test your VPN kill switch before you actually need it

Forgot to check mine before using public wifi at a coffee shop in Austin and my IP leaked for a full 5 minutes before I noticed, anyone else had a close call like that?

3

zarag17•22d ago

My big password manager switch happened after a close call

I used to keep all my passwords in a notes app on my phone for like 3 years. Felt fine because I had a lock screen code. Then last month I left my phone at a gas station in Fresno and someone got into it before I could remote wipe it. They didn't even need to break my lock screen, they just plugged it into a laptop and pulled data off through USB. I never thought about that being a thing. Now I use Bitwarden with a real master password and turned off USB data access on my phone. Anyone else only learn this stuff after something bad happened?

28

david_walker97•23d ago

Just realized after talking to my buddy who works IT for a school district

He said their biggest security issue isn't phishing emails but teachers leaving their laptops unlocked in classrooms, which honestly made me rethink how much I focus on complex threats vs basic stuff like locking your screen.

22

abbyhall•24d ago

Went from zero phishing emails to 30 a day after buying a domain last month

Honestly, I grabbed a cheap domain for a side project and within 48 hours my inbox was flooded with fake invoices and password reset scams. Has anyone else seen a massive spike in spam right after registering a new domain?

24

jessica331•25d ago

Hit 500 unread emails and realized I was making it worse

I let my inbox pile up to 500 unread messages last week. Turns out, I was clicking links in spam to unsubscribe, which just confirmed my address to scammers. My own inbox cleanout habit was feeding phishing attempts. Anyone else find a better way to deal with junk mail without getting burned?

1

craig.olivia•27d ago

I finally fixed a 3 hour phishing filter issue that should have taken 20 minutes

Last month I was working on setting up email security for a small business in Phoenix. The spam filter kept flagging their legitimate invoices from a vendor. I spent nearly 3 hours digging through white lists and rules before I realized I had the sender domain spelled wrong the whole time. One letter off, and it cost me a whole afternoon. Has anyone else wasted hours on a simple typo like this?

7

casey342•29d ago

Pro tip: Check your router logs every month. Here's why.

I noticed my internet getting slower over about two weeks. At first I blamed my ISP. Then I actually looked at my router logs for the first time in maybe 6 months. There were over 200 failed login attempts from different IP addresses in just one day. Someone was trying to brute force my admin password. Turns out I never changed the default password from the factory setting. I switched to a 20 character random password and enabled two factor authentication. Now my logs are clean. How often do you guys actually check your router logs?

15

rose_clark81•1mo ago

The day my password manager saved me from a phishing link

I clicked a link in an email that looked exactly like my bank's login page. My password manager refused to autofill and that's when I realized the URL was off by one letter. Has anyone else had their password manager catch something sketchy like that?

23

logan271•1mo ago

Debate: Should you use a VPN on public wifi or not?

I always thought using a VPN at coffee shops was a no-brainer, but after testing 3 different ones at a Starbucks in Austin, my connection got 5 times slower and one site flagged me as a bot. Some guys online say free wifi is fine if you stick to HTTPS sites only. What's your take on this whole VPN or no VPN thing for public networks?