FranLMSP/opsec
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Remove images

Browse Source
This commit is contained in:
Franco Colmenarez 2023-01-31 14:06:35 -05:00
parent 40846fb848
commit 4be6050656
1 changed files with 0 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
README.md
View File

@ -58,8 +58,6 @@ Remember, even though your passwords are *in theory* protected by encryption, an
Some websites have [very dumb rules](https://github.com/duffn/dumb-password-rules) on the allowed characters for the password field, so parametrize the password generator of your password manager as you need.
![Password Manager](assets/keepassxc.png "Password Manager")
It can take quite a bit of time to replace the passwords of all of your accounts, but it's worth the time.
## Multi-factor authentication
@ -74,8 +72,6 @@ That being said, most of the times (not always), you don't really need an specif
## Security Questions
![Security Questions](assets/security-questions.png "Security Questions")
**Don't be honest answering security questions**.
Security Questions are basically these basic questions about you (ie: "Whats your favorite food?", "Where did you study for the first time?", etc) that you can answer in case you forgot your password and you don't have any other way to recover it.
@ -92,10 +88,6 @@ Some services (specially bank accounts) still require you to answer security que
## VPNs
[VPNs](https://en.wikipedia.org/wiki/Virtual_private_network) can be useful for privacy *in some cases*, but they don't help much for security.
An over-simplified diagram about VPNs would look something like this:
![VPNs](assets/vpns.png "VPNs")
Most websites already protect the data with the HTTPS protocol. A VPN can prevent man-in-the-middle from sniffing a site's data if you visit a non HTTPS site, but once the requests leaves the VPN servers, the data is no longer encrypted by the VPN protocol, so you should avoid visiting those sites anyway.
Also, [many VPNs have lied about their no-log policies](https://torrentfreak.com/ipvanish-no-logging-vpn-led-homeland-security-to-comcast-user-180505/). Don't think that this is only an issue with free VPNs and that it doesn't happen with paid ones. Just because you gave money to a VPN provider isn't any warantee that they are not going to give your data to someone else anyway. There's no way to know if a VPN is collecting data about you, either intentionally or not.