Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-25 Thread Udhay Shankar N
On Sun, Feb 24, 2019 at 1:16 PM Udhay Shankar N wrote: > such as a yubikey. >> > >> > >> Are these available for purchase in India? >> > > e.g > https://www.amazon.in/Yubico-Authentication-USB-Security-Key/dp/B018Y1Q71M > Somewhat related, and good news on the being-pwned front: https://techcru

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-23 Thread Udhay Shankar N
On Sun, Feb 24, 2019 at 1:11 PM Aadisht Khanna wrote: > > > > such as a yubikey. > > > > > Are these available for purchase in India? > e.g https://www.amazon.in/Yubico-Authentication-USB-Security-Key/dp/B018Y1Q71M -- ((Udhay Shankar N)) ((udhay @ pobox.com)) ((www.digeratus.com))

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-23 Thread Aadisht Khanna
> > > 3. Enable 2FA EVERYWHERE that supports it. Ideally, with a hardware token > such as a yubikey. > > Are these available for purchase in India?

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-23 Thread José María Mateos
On Fri, Feb 22, 2019 at 06:54:41AM -0800, Thaths wrote: > In addition to all of those steps, I also recommend using unique > passwords in all the sites. It is not going to be possible for you to > remember that many unique passwords (especially if you choose strong > passwords). I recommend you ch

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Thaths
On Fri, Feb 22, 2019 at 7:24 AM Ra Jesh wrote: > Hahaha. Neat!!! > Actually, (a) If you are doing this "Forgot password" thing too often on a reasonably well-built site, you are setting off all kinds of red flags about being a potentially malicious actor. If they have a bot-or-not reputation sco

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Sidin Vadukut
The haveibeenpwned.com site is great and I use it every six months or to check if any logins have been compromised. (Sorry I keep forgetting the Silk protocol about replying before or after a thread.) On Fri, Feb 22, 2019 at 3:59 PM Ashim D'Silva wrote: > Medium made a huge deal about it when

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Ashim D'Silva
Medium made a huge deal about it when they released it as a feature: https://blog.medium.com/signing-in-to-medium-by-email-aacc21134fcd Makes total sense though; passwords are an old solution to a difficult problem. Of course it also means that your email better always be in your control otherwise

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Deepa Mohan
I must say that "use 'forgot password'!" is advice I get very often from my bank. I think it is an absurd solution that works! On Fri, Feb 22, 2019 at 8:53 PM Ra Jesh wrote: > Hahaha. Neat!!! > > On Fri, Feb 22, 2019, 20:51 Ashim D'Silva > wrote: > > > For sites I don’t use too often, I was alw

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Ra Jesh
Hahaha. Neat!!! On Fri, Feb 22, 2019, 20:51 Ashim D'Silva wrote: > For sites I don’t use too often, I was always tempted to reuse passwords > which is a pretty bad practice, so I started just using the forgot password > feature more often. So I have a ridiculous entirely random password that I >

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Ashim D'Silva
For sites I don’t use too often, I was always tempted to reuse passwords which is a pretty bad practice, so I started just using the forgot password feature more often. So I have a ridiculous entirely random password that I don’t know, and then just say forgot password when I want to log in. It’s

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Thaths
On Fri, Feb 22, 2019 at 2:42 AM Udhay Shankar N wrote: > On Fri, Feb 22, 2019 at 2:04 PM Udhay Shankar N wrote: > > > > 1. Log out all gmail/facebook/other social sessions (Most providers give > > you the option to "log out all current sessions") > > 2. Change all the passwords of pwned email ad

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Ra Jesh
This are good suggestions! Thanks Udhay. I was wondering if anyone has had this happen before and what steps they took. Have you ever been notified that your email ID and/or other details appears in a dump of data breach info? On Fri, Feb 22, 2019, 16:11 Udhay Shankar N wrote: > On Fri, Feb 22

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Udhay Shankar N
On Fri, Feb 22, 2019 at 2:04 PM Udhay Shankar N wrote: > 1. Log out all gmail/facebook/other social sessions (Most providers give > you the option to "log out all current sessions") > 2. Change all the passwords of pwned email addresses > 3. Enable 2FA EVERYWHERE that supports it. Ideally, with

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Udhay Shankar N
On Fri, Feb 22, 2019 at 1:39 PM Ra Jesh wrote: Compromised data included email addresses, IP Addresses, passwords, and > usernames. > 1. Log out all gmail/facebook/other social sessions (Most providers give you the option to "log out all current sessions") 2. Change all the passwords of pwned em

[silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Ra Jesh
This morning I received a notification from haveibeenpwned dot com informing me that the latest leak from UnderArmor affiliated My Fitness Pal app has my details included in the data that was breached. What steps do you recommend people should take if they're data has been stolen? Compromised dat