FabSwingers.com > Forums > The Lounge > Online Security
Online Security
Jump to: Newest in thread
I'm sure most people know about online security, strong passwords etc.
And will even school their children to, quite correctly, not put too much personal information on the internet.
Yet every day I am genuinely surprised to see the people of the Fab forums giving away potentially personal information.
Sure nobody might know your real name etc. but small snippets of info can add up to a big picture.
The answers to so many, seemingly innocent, threads can give away basic security info for online accounts. For example, your porn name = first pet and mother's maiden name.
And all of this is publicly viewable on the internet, one doesn't even have to be logged in.
All I'm saying is think and be careful. Perhaps even Google the 'German Tank Problem' |
Reply privately, Reply in forum +quote
or View forums list | |
|
By (user no longer on site)
over a year ago
|
See that’s the thing when it comes to them I never set it to the right thing
In fact I had company before hang up the phone on me because off my awner
I set them to like
Favourite place
Get to fuck you not me
Try saying that over the phone and watch them hang up |
Reply privately, Reply in forum +quote
or View forums list | |
"Get to fuck you not me
That's your first pet's name?
Something along those lines
That was just a example off the kind off things I set it to ha ha "
I'd never thought of that, though I can see it might be difficult to remember what you've set |
Reply privately, Reply in forum +quote
or View forums list | |
|
By (user no longer on site)
over a year ago
|
Also fazing has been a thing off the past for a long time
When people are willing to hand everything over legitimately
The new two
Are set up a fake company and pay FB cheap rate for data
Or carte a quirky little app that go viral and leaches everything out the phone
Russia has all ready got everyone data thanks to a face change app that was
Found to be carted by the Russian government and was download 5.5 million times |
Reply privately, Reply in forum +quote
or View forums list | |
|
By (user no longer on site)
over a year ago
|
"Get to fuck you not me
That's your first pet's name?
Something along those lines
That was just a example off the kind off things I set it to ha ha
I'd never thought of that, though I can see it might be difficult to remember what you've set "
Save them on a off line usb drive that way if I ever need them I just look at the text document on the usb drive in a offline evenment |
Reply privately, Reply in forum +quote
or View forums list | |
"Also fazing has been a thing off the past for a long time
When people are willing to hand everything over legitimately
The new two
Are set up a fake company and pay FB cheap rate for data
Or carte a quirky little app that go viral and leaches everything out the phone
Russia has all ready got everyone data thanks to a face change app that was
Found to be carted by the Russian government and was download 5.5 million times "
Just the sort of thing I would avoid |
Reply privately, Reply in forum +quote
or View forums list | |
|
By (user no longer on site)
over a year ago
|
"Also fazing has been a thing off the past for a long time
When people are willing to hand everything over legitimately
The new two
Are set up a fake company and pay FB cheap rate for data
Or carte a quirky little app that go viral and leaches everything out the phone
Russia has all ready got everyone data thanks to a face change app that was
Found to be carted by the Russian government and was download 5.5 million times
Just the sort of thing I would avoid "
Was big news back in 2019 easy to find the news posts about it just google face change Russian and you find the new about it |
Reply privately, Reply in forum +quote
or View forums list | |
I asked this exact question in the Irish forum last week and why people choose to ignore certain things on here because it's "all a bit of fun".
It's not just the info that people share in the forums, it's the fab stortellers who have made a name for themselves by telling other people's stories.
I've had people I've never spoken to before contact me on the back of something I post here and give me private details about other posters either because they want to impress me by being in the know or they expect me to react.
I've also witnessed fabbers at social events sharing the real names of others who aren't attending and telling private experiences that they were entrusted with.
This is not a place to let down your guard in. It's a sharing not a caring community. |
Reply privately, Reply in forum +quote
or View forums list | |
"I asked this exact question in the Irish forum last week and why people choose to ignore certain things on here because it's "all a bit of fun".
It's not just the info that people share in the forums, it's the fab stortellers who have made a name for themselves by telling other people's stories.
I've had people I've never spoken to before contact me on the back of something I post here and give me private details about other posters either because they want to impress me by being in the know or they expect me to react.
I've also witnessed fabbers at social events sharing the real names of others who aren't attending and telling private experiences that they were entrusted with.
This is not a place to let down your guard in. It's a sharing not a caring community. "
Yes this is so true |
Reply privately, Reply in forum +quote
or View forums list | |
"Yes and things like your first car or colour of it, people need to be really careful and remember what back up security questions they have chosen in the past just in case "
Agree, especially as the average 'security check' asks for you name, address and email address |
Reply privately, Reply in forum +quote
or View forums list | |
Problem is, and I speak from experience working in the Cyber-Security sector, the lack of awareness and having it drilled in.
Now, awareness only goes so far, but there’s tools out there which can pull your data together into an easy to read format.
On top of that, another tool like CUPP (Common User Password Profile) is scarily accurate in guessing peoples passwords, just from what people post online.
People have zero idea how easy it is to get your personal data in one place and grab your passwords. |
Reply privately, Reply in forum +quote
or View forums list | |
"Problem is, and I speak from experience working in the Cyber-Security sector, the lack of awareness and having it drilled in.
Now, awareness only goes so far, but there’s tools out there which can pull your data together into an easy to read format.
On top of that, another tool like CUPP (Common User Password Profile) is scarily accurate in guessing peoples passwords, just from what people post online.
People have zero idea how easy it is to get your personal data in one place and grab your passwords. "
Exactly this, though I put it less technically |
Reply privately, Reply in forum +quote
or View forums list | |
"Problem is, and I speak from experience working in the Cyber-Security sector, the lack of awareness and having it drilled in.
Now, awareness only goes so far, but there’s tools out there which can pull your data together into an easy to read format.
On top of that, another tool like CUPP (Common User Password Profile) is scarily accurate in guessing peoples passwords, just from what people post online.
People have zero idea how easy it is to get your personal data in one place and grab your passwords.
Exactly this, though I put it less technically "
I did a live presentation at work a while back & grabbed a senior execs data. Boy did their face drop |
Reply privately, Reply in forum +quote
or View forums list | |
|
By (user no longer on site)
over a year ago
|
"I'm sure most people know about online security, strong passwords etc.
And will even school their children to, quite correctly, not put too much personal information on the internet.
Yet every day I am genuinely surprised to see the people of the Fab forums giving away potentially personal information.
Sure nobody might know your real name etc. but small snippets of info can add up to a big picture.
The answers to so many, seemingly innocent, threads can give away basic security info for online accounts. For example, your porn name = first pet and mother's maiden name.
And all of this is publicly viewable on the internet, one doesn't even have to be logged in.
All I'm saying is think and be careful. Perhaps even Google the 'German Tank Problem' "
I have also thought about this. While for most people it’s just a fun game remember the face changing app a few years ago? |
Reply privately, Reply in forum +quote
or View forums list | |
"I have also thought about this. While for most people it’s just a fun game remember the face changing app a few years ago? "
Yes it was mentioned above. I missed that but I'd never have downloaded that sort of thing anyway thankfully |
Reply privately, Reply in forum +quote
or View forums list | |
|
By (user no longer on site)
over a year ago
|
totally agree too many people give to much info on fab simple things like your job can narrow you down ...photos of uniforms ....
we were at a local club once and in its carpark there was a guy taking reg numbers of cars n campers ... he was a swinger from the club but rumors were he was a cop too hence access to car reg = home adress.names....
never trust anyone until trust is earnt |
Reply privately, Reply in forum +quote
or View forums list | |
All this paranoia ... but anyone ever asked Fab Admin why they are using Google Analytics?
You can be as careful as you like, but unless you're using Tor or equivalent and completley isolating your browsing then the dots CAN be joined I'm afraid. |
Reply privately, Reply in forum +quote
or View forums list | |
|
By (user no longer on site)
over a year ago
|
"I'm sure most people know about online security, strong passwords etc.
And will even school their children to, quite correctly, not put too much personal information on the internet.
Yet every day I am genuinely surprised to see the people of the Fab forums giving away potentially personal information.
Sure nobody might know your real name etc. but small snippets of info can add up to a big picture.
The answers to so many, seemingly innocent, threads can give away basic security info for online accounts. For example, your porn name = first pet and mother's maiden name.
And all of this is publicly viewable on the internet, one doesn't even have to be logged in.
All I'm saying is think and be careful. Perhaps even Google the 'German Tank Problem' "
|
Reply privately, Reply in forum +quote
or View forums list | |
|
By (user no longer on site)
over a year ago
|
"Problem is, and I speak from experience working in the Cyber-Security sector, the lack of awareness and having it drilled in.
Now, awareness only goes so far, but there’s tools out there which can pull your data together into an easy to read format.
On top of that, another tool like CUPP (Common User Password Profile) is scarily accurate in guessing peoples passwords, just from what people post online.
People have zero idea how easy it is to get your personal data in one place and grab your passwords. "
Growing up not being computer literate or savvy |
Reply privately, Reply in forum +quote
or View forums list | |
"Also fazing has been a thing off the past for a long time
When people are willing to hand everything over legitimately
The new two
Are set up a fake company and pay FB cheap rate for data
Or carte a quirky little app that go viral and leaches everything out the phone
Russia has all ready got everyone data thanks to a face change app that was
Found to be carted by the Russian government and was download 5.5 million times
Just the sort of thing I would avoid
Was big news back in 2019 easy to find the news posts about it just google face change Russian and you find the new about it"
I must have missed that. This is what happens when I only rely on Essex tom for news reports |
Reply privately, Reply in forum +quote
or View forums list | |
In my old job I used to like to go wonder the different departments, have a tea and chat. A certain department that specialised gathering information and putting it together gave me a crash course in this. They asked me a couple of very basic details of a freind of mine and said comeback in 30 mins. I did, they had a picture of them, their house, where they work, a bit about their family and more. I asked them what special database or system did they access? They say nope, just used the open source Internet. And that was back in the early 2000s. There's so much more resources, websites and tools these days. |
Reply privately, Reply in forum +quote
or View forums list | |
There was a site a couple of years ago that when you entered passwords, it told you wether they had been compromised and thus were used by hackers. Some of mine were. It's good to get a wake up call |
Reply privately, Reply in forum +quote
or View forums list | |
|
By (user no longer on site)
over a year ago
|
"There was a site a couple of years ago that when you entered passwords, it told you wether they had been compromised and thus were used by hackers. Some of mine were. It's good to get a wake up call "
'Have I been pwned' |
Reply privately, Reply in forum +quote
or View forums list | |
|
By (user no longer on site)
over a year ago
|
To prove I could, I once tracked down someone’s location from 2 photos and 1 bit of info. My friend sent a couple of photos and said hello from x (where x was an part of Sweden), and I found her using Google maps and comparing a couple of reference points n the pics, it was easy. Privacy is a huge issue for people and most don’t realise how little they have online. When was the last time anyone here paid money to Google or Facebook, yet they’re in the top 10 biggest companies of all time, and it’s all built on selling you |
Reply privately, Reply in forum +quote
or View forums list | |
|
By (user no longer on site)
over a year ago
|
Its why the privacy statements on profiles mean nothing. Any one can reverse image search, screenshot, copy, etc any pics here.
I heard that any passwords under 11+ digits without 3 different elements (letters, numbers, symbols) are easy to be cracked by password hacking software, but not sure if that's true.
Also there are apps to remotely log on to your phone's camera... Thats the 1 that terrifies me! |
Reply privately, Reply in forum +quote
or View forums list | |
|
By (user no longer on site)
over a year ago
|
"Its why the privacy statements on profiles mean nothing. Any one can reverse image search, screenshot, copy, etc any pics here.
I heard that any passwords under 11+ digits without 3 different elements (letters, numbers, symbols) are easy to be cracked by password hacking software, but not sure if that's true.
Also there are apps to remotely log on to your phone's camera... Thats the 1 that terrifies me! "
The way passwords are hacked these days doesn’t involve someone trying loads of attempts until they get it right any more, they just steal the encrypted password that they can’t use, and literally compare it to a have list of every possible combination that’s been pre-encrypted and look for a match. They literally look up your password from a list. Admittedly the list is enormous but you can buy it, no need to spend years encrypting all the combinations live and checking, you buy the 8 character password rainbow list, or the 9 character etc, and it’s a piece of piss. Meaning three things: a) what you choose as your password is meaningless in terms of complexity, character substitution etc, the only thing that makes your password safer is making it longer, b) password reuse is super dodgy and unsafe and c) your online safety is essentially as safe as the systems of the people you have passwords for.
So if you reuse a the same shorter password all over, the chances of one of the places having shit security are almost certain and you have already been hacked |
Reply privately, Reply in forum +quote
or View forums list | |
|
By (user no longer on site)
over a year ago
|
"Its why the privacy statements on profiles mean nothing. Any one can reverse image search, screenshot, copy, etc any pics here.
I heard that any passwords under 11+ digits without 3 different elements (letters, numbers, symbols) are easy to be cracked by password hacking software, but not sure if that's true.
Also there are apps to remotely log on to your phone's camera... Thats the 1 that terrifies me!
The way passwords are hacked these days doesn’t involve someone trying loads of attempts until they get it right any more, they just steal the encrypted password that they can’t use, and literally compare it to a have list of every possible combination that’s been pre-encrypted and look for a match. They literally look up your password from a list. Admittedly the list is enormous but you can buy it, no need to spend years encrypting all the combinations live and checking, you buy the 8 character password rainbow list, or the 9 character etc, and it’s a piece of piss. Meaning three things: a) what you choose as your password is meaningless in terms of complexity, character substitution etc, the only thing that makes your password safer is making it longer, b) password reuse is super dodgy and unsafe and c) your online safety is essentially as safe as the systems of the people you have passwords for.
So if you reuse a the same shorter password all over, the chances of one of the places having shit security are almost certain and you have already been hacked "
Thanks for this. So length & where you put your bits is key |
Reply privately, Reply in forum +quote
or View forums list | |
|
By (user no longer on site)
over a year ago
|
"There was a site a couple of years ago that when you entered passwords, it told you wether they had been compromised and thus were used by hackers. Some of mine were. It's good to get a wake up call
'Have I been pwned'"
Google can also do this automatically |
Reply privately, Reply in forum +quote
or View forums list | |
|
By (user no longer on site)
over a year ago
|
"Its why the privacy statements on profiles mean nothing. Any one can reverse image search, screenshot, copy, etc any pics here.
I heard that any passwords under 11+ digits without 3 different elements (letters, numbers, symbols) are easy to be cracked by password hacking software, but not sure if that's true.
Also there are apps to remotely log on to your phone's camera... Thats the 1 that terrifies me!
The way passwords are hacked these days doesn’t involve someone trying loads of attempts until they get it right any more, they just steal the encrypted password that they can’t use, and literally compare it to a have list of every possible combination that’s been pre-encrypted and look for a match. They literally look up your password from a list. Admittedly the list is enormous but you can buy it, no need to spend years encrypting all the combinations live and checking, you buy the 8 character password rainbow list, or the 9 character etc, and it’s a piece of piss. Meaning three things: a) what you choose as your password is meaningless in terms of complexity, character substitution etc, the only thing that makes your password safer is making it longer, b) password reuse is super dodgy and unsafe and c) your online safety is essentially as safe as the systems of the people you have passwords for.
So if you reuse a the same shorter password all over, the chances of one of the places having shit security are almost certain and you have already been hacked "
You dont need to buy any lists really. Github has alot of them. Kali linux itself normally comes with a few lists including Rockyou.txt, which isnt a Rainbow Table like you mentioned but a plain text word list. But is still very effective |
Reply privately, Reply in forum +quote
or View forums list | |
"Never use a related word to anything personal to you. A phrase that makes sense to you is preferable and changeable per app / website so unique. "
Definitely, you hear people say thy use the same one so they don't forget |
Reply privately, Reply in forum +quote
or View forums list | |
|
By *adyJayneWoman
over a year ago
Burnleyish (She/They) |
My trick is a 3-6 word passphrase (Google xkcd correct horse battery staple)
This is one of the times I wish I could link eternally, hive dot io have a great blog/chart about password security |
Reply privately, Reply in forum +quote
or View forums list | |
"My trick is a 3-6 word passphrase (Google xkcd correct horse battery staple)
This is one of the times I wish I could link eternally, hive dot io have a great blog/chart about password security"
Why share your trick
You'll need to change it now. |
Reply privately, Reply in forum +quote
or View forums list | |
» Add a new message to this topic