FranLMSP/opsec
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add more recommendations

Browse Source
This commit is contained in:
Franco Colmenarez 2023-01-31 22:50:22 -05:00
parent c382c97570
commit be087dce70
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
README.md
View File

@ -18,6 +18,7 @@ Criminals are always getting more and more creative and coming up with new phish
### Recommendations ### Recommendations
- Investigate and learn about different phishing methods that are used. - Investigate and learn about different phishing methods that are used.
- [Configure your browser to warn you about dangerous sites](https://support.google.com/chrome/answer/99020?hl=en&co=GENIE.Platform%3DDesktop).
- Use your common sense, sometimes phishing can be quite obvious. - Use your common sense, sometimes phishing can be quite obvious.
- Keep an eye open, some other phishing can be not as obvious. - Keep an eye open, some other phishing can be not as obvious.
- Use an ad blocker such as [uBlockOrigin](https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm) (it may not have all features on Chromium-based browsers due to [Manifest V3](https://developer.chrome.com/docs/extensions/mv3/intro/)). You can also use the [Brave Browser]() which comes with an adblocker built in. - Use an ad blocker such as [uBlockOrigin](https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm) (it may not have all features on Chromium-based browsers due to [Manifest V3](https://developer.chrome.com/docs/extensions/mv3/intro/)). You can also use the [Brave Browser]() which comes with an adblocker built in.
@ -109,6 +110,8 @@ Any modern browser should be fine regarding security. If you are concerned about
### Recommendations ### Recommendations
- Use [multiple profiles](https://www.chromium.org/developers/creating-and-using-profiles/), for example, one for personal related stuff, and another one for work related stuff. - Use [multiple profiles](https://www.chromium.org/developers/creating-and-using-profiles/), for example, one for personal related stuff, and another one for work related stuff.
- Disable JavaScript JIT. [Many security vulnerabilities are JIT bugs](https://microsoftedge.github.io/edgevr/posts/Super-Duper-Secure-Mode/). Note: You may notice that your browser is a bit slower after disabling JIT. It's also hard to disable JIT on some browsers. - Disable JavaScript JIT. [Many security vulnerabilities are JIT bugs](https://microsoftedge.github.io/edgevr/posts/Super-Duper-Secure-Mode/). Note: You may notice that your browser is a bit slower after disabling JIT. It's also hard to disable JIT on some browsers.
- [Be careful with WebRTC](https://support.brave.com/hc/en-us/articles/360017989132-How-do-I-change-my-Privacy-Settings-#webrtc). WebRTC has the potential of leaking your real IP address, even under a VPN. You can [test it here](https://hide.me/en/webrtc-leak-test).
- [Enable HTTPS-only mode](https://blog.mozilla.org/attack-and-defense/2021/03/10/insights-into-https-only-mode/)
## IoT devices ## IoT devices
[IoT devices](https://en.wikipedia.org/wiki/Internet_of_things), such as your Smart TV, Smart Fridge, Smart Watch, or "Smart Anything" (even smart lightbulbs), are usually built with very poor security standards, and [they get hacked all the time](https://finance.yahoo.com/news/hackers-breach-thousands-security-cameras-213219424.html). [IoT devices](https://en.wikipedia.org/wiki/Internet_of_things), such as your Smart TV, Smart Fridge, Smart Watch, or "Smart Anything" (even smart lightbulbs), are usually built with very poor security standards, and [they get hacked all the time](https://finance.yahoo.com/news/hackers-breach-thousands-security-cameras-213219424.html).