Thread by @j_opdenakker, Every day should be #SaferInternetDay , but still I'll tweet some security [...]

, but still I'll tweet some security tips (and links to blogs) throughout the day.

1. You can’t lose what you don’t have. Only register an account for a website or app when you really need to and fake as much data as possible.

#infosec

2. Never reuse passwords. https://johnopdenakker.com/no-excuse-for-password-reuse/

In this blog I explain why...

#SaferInternetDay

#infosec

Secure password management Part 1 - There’s no excuse for password reuse, or is there?

Don’t reuse passwords. A simple advice, but very hard to accomplish for most people. This became also very clear in a survey Google did in partnership with Harris Poll. They questioned 3,000 adults...

https://johnopdenakker.com/no-excuse-for-password-reuse/

3. Instead use a password manager or even a password book if that’s most convenient for you to support you in creating unique passwords.

Some reading material for the interested
https://johnopdenakker.com/some-tips-for-choosing-a-password-manager/

https://johnopdenakker.com/browser-password-managers/

https://johnopdenakker.com/secure-password-management-password-managers-not-the-best-solution-for-everyone/

#SaferInternetDay

#infosec

Secure password management part 4 - Why password managers are not the best solution for everyone

Do you know how many user accounts you have? Because I use a password manager, I do. Do you know all sites for which you registered an account? Could you please motivate your answer in the replies....

https://johnopdenakker.com/some-tips-for-choosing-a-password-manager/

4. When available configure two-factor authentication for online accounts. Don't forget to configure a fallback (2FA backup codes or other recovery mechanism).

More context:

https://johnopdenakker.com/better-account-security-with-mfa/

https://johnopdenakker.com/enable-2fa-dont-lose-access-to-accounts/

#SaferInternetDay

#infosec

Enable two-factor authentication but don't lose access to your accounts

With the blogs in this series I want to reach not only my typical audience, security professionals, but especially less security aware people to help them improve their personal security. If you...

https://johnopdenakker.com/better-account-security-with-mfa/

5. Backup AND test backups (restore regularly). At least 2 backups at geographically different locations. Consider encryption (anti-theft, privacy). Careful with auto-sync, it might propagate deletion or encryption (ransomware)
https://johnopdenakker.com/securily-backup-your-data/

#SaferInternetDay

#infosec

Securily backup your data

With the blogs in this series I want to reach not only my typical audience, security professionals, but especially less security aware people to help them improve their personal security. If you...

https://johnopdenakker.com/securily-backup-your-data/

6. When in doubt don't click links in mails, chat or SMS. Instead browse to the site by typing the legitimate URL or by using your password manager.

More on phishing: https://johnopdenakker.com/phishing-101/

#SaferInternetDay

#infosec

Phishing 101

Phishing is a real plague. Read this post to learn how to detect phishing attempts and what you can do to protect yourself in the best possible way.

https://johnopdenakker.com/phishing-101/

7. Don’t open attachments in mails from unknown senders. Even if sender is known but you don't expect a particular document, verify first with them that it's legit.

More info about ransomware prevention and recovery: https://johnopdenakker.com/ransomware-101/

#SaferInternetDay

#infosec

Ransomware 101

With the blogs in this series I want to reach not only my typical audience, security professionals, but especially less security aware people to help them improve their personal security. If you...

https://johnopdenakker.com/ransomware-101/

8. Update all the things. Important to keep your OS and software up to date, including the latest security patches on your PCs, smartphones and tablets.

https://johnopdenakker.com/why-you-should-keep-your-software-up-to-date/

#SaferInternetDay

#infosec

Why you should keep your software up to date

Out of date or not regularly updated operating systems and applications put you at risk because they have a lot of vulnerabilities. Many of these vulnerabilities can be easily detected and exploited...

https://johnopdenakker.com/why-you-should-keep-your-software-up-to-date/

9. Uninstall software you don’t need, it limits your attack surface.

https://johnopdenakker.com/remove-unused-and-unnecessary-software/

#SaferInternetDay

#infosec

Remove unused and unnecessary software

The more software you're running on your devices the bigger the potential security risks. Read this blog to learn more about how and why you should remove unused and unnecessary software.

https://johnopdenakker.com/remove-unused-and-unnecessary-software/

10. Install apps from the official (app) stores. Also check that (mobile) apps, browser extensions and third party applications (that you give access to another account) don’t have excessive rights.

https://johnopdenakker.com/how-to-know-if-you-can-trust-mobile-apps/

#SaferInternetDay

#infosec

How to know if you can trust mobile apps

With the blogs in this series I want to reach not only my typical audience, security professionals, but especially less security aware people to help them improve their personal security. If you...

https://johnopdenakker.com/how-to-know-if-you-can-trust-mobile-apps/

11. Third party apps can pose serious security and privacy risks. It's important to regularly check the ones you use. More info in this blog.
https://johnopdenakker.com/security-and-privacy-risks-of-3rd-party-apps/

#SaferInternetDay

#infosec

The security and privacy risks of third party apps

Third party apps that have access to your online accounts can pose a security and privacy risk if they have excessive permissions or when they get hacked. Read here how you can control the risk.

https://johnopdenakker.com/security-and-privacy-risks-of-3rd-party-apps/

12. A VPN offers privacy by design and an extra layer of security. Your real IP address is hidden for parties like ISPs and data in transit is secured even on sites that don't implement HTTPS or do so insecurely. https://johnopdenakker.com/how-a-vpn-increases-privacy-and-security/

#SaferInternetDay

#infosec

How a VPN increases privacy and security

With the blogs in this series I want to reach not only my typical audience, security professionals, but especially less security aware people to help them improve their personal security. If you...

https://johnopdenakker.com/how-a-vpn-increases-privacy-and-security/

13. There's more tools that you can use to improve your privacy and security when browsing the web. I listed some of them in this blog post:
https://johnopdenakker.com/security-and-privacy-enhancing-tools/
#SaferInternetDay

#infosec

Security and privacy enhancing tools

With the blogs in this series I want to reach not only my typical audience, security professionals, but especially less security aware people to help them improve their personal security. If you...

https://johnopdenakker.com/security-and-privacy-enhancing-tools/

14. Another big security risk are IoT devices. Make sure that you properly secure them. More info in this post:

https://johnopdenakker.com/the-security-risks-of-internet-connected-devices/

#SaferInternetDay

#infosec

The security risks of internet connected devices

Most people have a lot of internet connected devices at home. Obviously computers, laptops, tablets and smartphones, but it doesn't stop there. TVs, dishwashers, kettles, wearables, toys and even...

https://johnopdenakker.com/the-security-risks-of-internet-connected-devices/

15. What we post on social media can also have an impact on our privacy and security. Be careful about it. https://johnopdenakker.com/how-to-stay-safe-on-social-media/

#SaferInternetDay

#infosec

How to stay safe on social media

Using social media is not as innocent as it looks. There are several security and privacy risks lurking around the corner. It's important to be on your guard. In this post I'll give you some advice...

https://johnopdenakker.com/how-to-stay-safe-on-social-media/

16. But your online exposure is of course not limited to what you share on social media. While it's not always easy there are some ways to control your online exposure. https://johnopdenakker.com/how-to-control-your-online-exposure/

#SaferInternetDay

#infosec

How to control your online exposure

What do you do if you want to know more about someone? You'll do a search on their name in your favorite search engine, right? And your image about that person will be formed by the first search...

https://johnopdenakker.com/how-to-control-your-online-exposure/

17. There's also data breaches of course. While you can change a breached password, you can't do so for a lot of other leaked personal data. One of the ways leaked data is abused is in extortion scams, for instance sextortion.

https://johnopdenakker.com/sextortion-scams-what-you-need-to-know/

#SaferInternetDay

#infosec

Sextortion scams - What you need to know

In these series I covered already several forms of online crime, for instance ransomware, phishing and tech support scams. They all have something in common, deception techniques. Criminals try in...

https://johnopdenakker.com/sextortion-scams-what-you-need-to-know/

18. And except for phishing and extortion there's also other kind of scams we should be wary about. For instance tech support scams.

Keep in mind: most things that are unsolicited and/or too good to be true just aren't true.
https://johnopdenakker.com/tech-support-scams-what-you-need-to-know/

#SaferInternetDay

#infosec

Tech support scams - what you need to know

Tech support scams are fraudulent operations in which criminals try to convince people that they have serious problems on their computer that put them at risk. In this article you can find some tips...

https://johnopdenakker.com/tech-support-scams-what-you-need-to-know/

19. I want to end with saying that online security is an ongoing process.

Build a strong security foundation but also keep your security at a high level by regularly reviewing the measures and tools you use.

https://johnopdenakker.com/online-security-is-an-ongoing-process/

#SaferInternetDay

#infosec

Online security is an ongoing process

This is the 31st and last post in my Cyber Security Awareness Month blog series. I will do a short recap of what I covered in this series, but I also want to emphasize that online security is not a...

https://johnopdenakker.com/online-security-is-an-ongoing-process/

You can follow @j_opdenakker.

Tip: mention @twtextapp on a Twitter thread with the keyword “unroll” to get a link to it.

Latest Threads Unrolled: