Skip to content

Most privacy / security focused password manager

Unsolved Privacy
12 4 3.6k 1

Related Topics
  • Claude Mythos in cyber security

    Chitchat security artificial intelligence
    4
    5 Votes
    4 Posts
    2k Views
    phenomlab
    @crazycells I did see something similar to that article, yes. I never fully understood why anyone would want to give unfettered and complete access to AI without first understanding exactly what it had control of, and what it intended to do with that access. This isn’t the first “horror story” and it won’t be the last.
  • 1 Votes
    1 Posts
    842 Views
    No one has replied
  • Bad information security advice

    Security linkedin security advice
    1
    1
    1 Votes
    1 Posts
    792 Views
    No one has replied
  • 12 Votes
    8 Posts
    9k Views
    phenomlab
    @crazycells good question. Gmail being provided by Google is going to be one of the more secure by default out of the box, although you have to bear in mind that you can have the best security in the world, but that is easily diluted by user decision. Obviously, it makes sense to secure all cloud based services with at least 2fa protection, or better still, biometric if available, but email still remains vastly unprotected (unless enforced in the sense of 2fa, which I know Sendgrid do) because of user choice (in the sense that users will always go for the path of least resistance when it comes to security to make their lives easier). The ultimate side effect of taking this route is being vulnerable to credentials theft via phishing attacks and social engineering. The same principle would easily apply to Proton Mail, who also (from memory) do not enforce 2fa. Based on this fact, neither product is more secure than the other without one form of additional authentication at least being imposed. In terms of direct attack on the servers holding mail accounts themselves, this is a far less common type of attack these days as tricking the user is so much simpler than brute forcing a server where you are very likely to be detected by perimeter security (IDS / IPS etc).
  • 19 Votes
    30 Posts
    9k Views
    JAC
    @phenomlab 100%.
  • Crowdsec: a replacement for Fail2ban

    Security crowdsec security ips
    3
    2
    4 Votes
    3 Posts
    4k Views
    DownPW
    @phenomlab No they have a free and pro console instance. We can see alert with IP, Source AS, scenario attack etc… Installation on the NODEBB server without problems. Very good tools [image: cf7e5a89-84f4-435b-82eb-434c0bfc895e-image.png] [image: cc82a10e-a1f1-4fd8-a433-7c9b2d31f254-image.png] [image: 1b7147b0-37c6-4d87-b4f1-a0fe92e74afd-image.png] [image: 7c21fc10-1825-48e1-a993-92b84455f074-image.png] – We can also do research on IPs via the crowdsec analyzer I believe it’s 500 per month in the Free version [image: 43bc8265-a57c-4439-829c-0bb8602d99b4-image.png]
  • Hacked because you didn't listen ?

    Blog hacked security vulnerability
    1
    1
    0 Votes
    1 Posts
    790 Views
    No one has replied
  • Never underestimate the importance of security

    Blog security complacency
    1
    1
    0 Votes
    1 Posts
    882 Views
    No one has replied