Skip to content

Most privacy / security focused password manager

Unsolved Privacy
12 4 3.7k 1

Related Topics
  • Claude Mythos in cyber security

    Chitchat security artificial intelligence
    4
    5 Votes
    4 Posts
    2k Views
    phenomlab
    @crazycells I did see something similar to that article, yes. I never fully understood why anyone would want to give unfettered and complete access to AI without first understanding exactly what it had control of, and what it intended to do with that access. This isn’t the first “horror story” and it won’t be the last.
  • Ex GCHQ employee risk to national security

    Discussion gchq security
    4
    1 Votes
    4 Posts
    2k Views
    Madchatthew
    @phenomlab said in Ex GCHQ employee risk to national security: I can’t believe also that security is so lax that someone without adequate clearance can waltz into a restricted area and take what they want. Yeah I can’t believe that either. It is crazy
  • 12 Votes
    8 Posts
    9k Views
    phenomlab
    @crazycells good question. Gmail being provided by Google is going to be one of the more secure by default out of the box, although you have to bear in mind that you can have the best security in the world, but that is easily diluted by user decision. Obviously, it makes sense to secure all cloud based services with at least 2fa protection, or better still, biometric if available, but email still remains vastly unprotected (unless enforced in the sense of 2fa, which I know Sendgrid do) because of user choice (in the sense that users will always go for the path of least resistance when it comes to security to make their lives easier). The ultimate side effect of taking this route is being vulnerable to credentials theft via phishing attacks and social engineering. The same principle would easily apply to Proton Mail, who also (from memory) do not enforce 2fa. Based on this fact, neither product is more secure than the other without one form of additional authentication at least being imposed. In terms of direct attack on the servers holding mail accounts themselves, this is a far less common type of attack these days as tricking the user is so much simpler than brute forcing a server where you are very likely to be detected by perimeter security (IDS / IPS etc).
  • iPhone Data and privacy

    Privacy apple privacy
    2
    4 Votes
    2 Posts
    2k Views
    phenomlab
    Here’s a very useful video that will walk you through the privacy features of Android - mostly around the ones you should disable to get the most out of the experience
  • Crowdsec: a replacement for Fail2ban

    Security crowdsec security ips
    3
    2
    4 Votes
    3 Posts
    4k Views
    DownPW
    @phenomlab No they have a free and pro console instance. We can see alert with IP, Source AS, scenario attack etc… Installation on the NODEBB server without problems. Very good tools [image: cf7e5a89-84f4-435b-82eb-434c0bfc895e-image.png] [image: cc82a10e-a1f1-4fd8-a433-7c9b2d31f254-image.png] [image: 1b7147b0-37c6-4d87-b4f1-a0fe92e74afd-image.png] [image: 7c21fc10-1825-48e1-a993-92b84455f074-image.png] – We can also do research on IPs via the crowdsec analyzer I believe it’s 500 per month in the Free version [image: 43bc8265-a57c-4439-829c-0bb8602d99b4-image.png]
  • The Multi-Billion Pound Catfishing Industry

    Blog catfishing security fraud
    1
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Why you should never neglect physical security

    Blog infrastructure security blog
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • is my DMARC configured correctly?

    Solved Configure
    3
    2
    3 Votes
    3 Posts
    2k Views
    Hari
    @phenomlab said in is my DMARC configured correctly?: you’ll get one from every domain that receives email from yours. Today I have received another mail from outlook DMARC, i was referring to your reply again and found it very helpful/informative. thanks again. I wish sudonix 100 more great years ahead!