Don't use Mobile Phones

[CaffeineAddict]

@Aristarchus
There is no way I'll ever trust my phone more than my PC due to a simple logic, which is that you have full control over your OS on PC vs no control at all on your phone.
Phones are locked down and I find this to be suspicious on a galactic scale.

 

[Trynna3]

@Aristarchus
There is no way I'll ever trust my phone more than my PC due to a simple logic, which is that you have full control over your OS on PC vs no control at all on your phone.
Phones are locked down and I find this to be suspicious on a galactic scale.

Until some info stealer gets your cookie sessions without you noticing... (I thought I would need to make this meme, but I found it ready made )

 

[MikeWalsh]

@MikeWalsh
Your SMS as well as any other kind of communications via phone can be intercepted by phone operator or by government since phone operator is required to comply on demand.


You must be very lazy, it's not like you do this multiple times a day, taking Q-code is one time job, you set it and forget it.

A-yup! "Lazy" is my middle name.....


Mike.

 

[KGIII]

I prefer to do 2FA over email, specifically an email account on a server that I control. That way, it's never in plain text until it hits my inbox.

 

[APTI]

I've been using 2FA for my online accounts for years now, and it's a game-changer for security. Sure, it's an extra step, but it's worth it. The peace of mind knowing my accounts are safer from hacks is priceless. Definitely recommend everyone to enable it wherever possible.

2fa is a cop out and joke. Think about it. They are relying on your email or phone provider's security which is usually alot less and is totally out of their control. They just pass the burden to somebody else that doesn't care about it because they just want your email secure and that is not a big security step. Nor is your phone. 2fa causes more issues and give you a false sense of security. Just like TSA or gov't. make it overly complicated (rube goldberg machine) and people will feel safer even when they are not. Placebo effect.

 

[CaffeineAddict]

I prefer to do 2FA over email, specifically an email account on a server that I control. That way, it's never in plain text until it hits my inbox.

Agree, that's equally good alternative as long as you're in control of the mail server.

2fa is a cop out and joke. Think about it. They are relying on your email or phone provider's security which is usually alot less and is totally out of their control. They just pass the burden to somebody else that doesn't care about it because they just want your email secure and that is not a big security step. Nor is your phone. 2fa causes more issues and give you a false sense of security. Just like TSA or gov't. make it overly complicated (rube goldberg machine) and people will feel safer even when they are not. Placebo effect.

Agree as well because control over a phone (or 3rd party mail service) is just an illusion, 2FA authenticator on your PC however doesn't suffer from these problems since you have full control over your OS.

 

[Condobloke]

All of the above prompts the question.....

Why is there such a shortage of authenticator apps for PC's ?

I see the one linked to by @CaffeineAddict .. : https://github.com/paolostivanin/OTPClient

As @MikeWalsh said a lot of screwing around....not particularly user friendly, and I agree.

So....Why ?

 

[MikeWalsh]

@Condobloke :-

Why is there such a shortage of authenticator apps for PC's ?

Simple answer, Brian; the likes of me & thee are dinosaurs by modern standards! Most people are doing stuff while they're 'out & about', so they have their smartphones with them at all times. In fact, for many people, their smartphone IS their computer.....many don't even bother with a desktop OR laptop PC any more.

A smartphone can be used in every situation, so.....that's why most authenticators are made for phones. And, unfortunately, the same is starting to be the case for many other apps; several I wouldn't mind taking advantage of appear to be built ONLY for smartphones nowadays...

ATM, I'm fortunate in that the few sites I use that insist on 2FA will, thus far, let me do this via SMS.

Sign o' the times, I'm afraid. I know several folks who've even done away with their landlines, 'cos they use 'em so little the line rental costs more than the usage.....so they're no longer even vaguely cost-effective.

(shrug...)


Mike.

 

[Condobloke]

The usage of smartphones is astronomical.....it is a "done deal'....it is not going anywhere any time soon.

Having said that, I feel the pain re people's security and the slapdash approach to security. It is absolutely going to bring some people unstuck....bigtime!

However, being grumbled about is not gonna 'fix' it

It will not be 'fixed' anytime soon...

So we learn to live with it. 'Own it' ....I think is the way to go

Take precautions re what you are able to access on it.....if you just must have instant access to your bank accounts etc etc etc , then find an approach in accessing them that protects YOU.

I spoke to a guy at Westpac Bank (australia) recently...I asked why I cannot use a longggg password when I access that bank....either from mobile phone or from pc.
His reply was, 'we pay attention to behaviour' ...in other words my behaviour. I do things in a certain way and those actions and the places I take those actions from are predictable. i agree.

Take this line of thought and translate it to a 'safety procedure' for using with your mobile phone.

I hope someone understands what I just typed.

 

[GatorsFan]

2fa is a cop out and joke. Think about it. They are relying on your email or phone provider's security which is usually alot less and is totally out of their control. They just pass the burden to somebody else that doesn't care about it because they just want your email secure and that is not a big security step. Nor is your phone. 2fa causes more issues and give you a false sense of security. Just like TSA or gov't. make it overly complicated (rube goldberg machine) and people will feel safer even when they are not. Placebo effect.

Yep 2FA on a cell phone is like wearing a condom with holes, it gives you a false sense of security while being screwed

 

[CaffeineAddict]

All of the above prompts the question.....

Why is there such a shortage of authenticator apps for PC's ?

Agree with @MikeWalsh , phones are standard for authenticators, but few of us realize how insecure this is, which is why IMO authenticators for PC started to appear.

However changing opinion of existing phone users in regard to authenticators is like pulling their teeth out.

 

[Condobloke]

However changing opinion of existing phone users in regard to authenticators is like pulling their teeth out.

What you are actually asking them to do is, (shock horror aggg !!) change their habits...

You may as well try to melt concrete with a cigar lighter

 

[Condobloke]

Speaking of Mobile phones.... Android & iPhone

How to Keep Your Location Data Safe From Security Breaches

The recent Gravy Analytics breach included data from apps like Tinder, Grindr, and pregnancy and period trackers.

au.lifehacker.com

 

[Condobloke]

And.....sms's (texting)

Your Texts May Not Be Secure, According to the FBI

Stop texting with SMS.

au.lifehacker.com

 

[Tolkem]

@CaffeineAddict Get a librem5 phone https://puri.sm/products/librem-5/

Use our unique hardware kill switches to physically disconnect WiFi, Bluetooth, cellular signal, microphone & camera.

They're not exactly "friendly budget" tho, but if you can afford it https://shop.puri.sm/shop/librem-5/
We're all screwed, I don't like it any more than you do, but it's true. Data collection won't stop, if anything, it'll get worse. Google announces it’s going to intentionally violate EU law
Ever since the day we got that email account, that google account, or any other kind of online account, our data is out there. https://datareportal.com/global-digital-overview
Like @f33dm3bits said "in this day an age it's not possible to live without one" and while I don't agree a 100% with that, it is true that smart devices have become more and more relevant in today's world, be it for work, keep in touch with our loved ones, entertainment, etc. They're here to stay. All we can do is limit the amount of information we put out there, use our common sense when doing stuff online, and hope that keeps up safe enough.

 

[Condobloke]

https://www.eff.org/deeplinks/2024/11/creators-police-location-tracking-tool-arent-vetting-buyers-heres-how-protect

 

[CaffeineAddict]

Get a librem5 phone

I'm impressed such phone exists, added to bookmarks to consider getting it at some point thanks for sharing.
It is really expensive though, for this money and little more you can get gaming PC.

 

[Condobloke]

I did not look at the prices, but if it is up there with a gaming pc, then the owners etc of librem5 obviously intend to take full advantage of the uniqueness of their item