Skip to content
GitLab
Explore
Sign in
This is an archived project. Repository and other project resources are read-only.
Legacy
Trac
Wiki
Org
Meetings
2019stockholm
Notes
SecurityTrainingBasics
SecurityTrainingBasics
· Changes
Page history
Raw import from Trac using Trac markup language.
authored
Jun 15, 2020
by
Alexander Færøy
Hide whitespace changes
Inline
Side-by-side
org/meetings/2019Stockholm/Notes/SecurityTrainingBasics.md
0 → 100644
View page @
53a16e3a
Gus’s Security Training Plan
+
DAY 1:
1.
Update your computer and phone OSs so they’re not vulnerable.
2.
Encrypt hard drive on laptop
⁃ Mac : file vault
⁃ Windows : bitlock
⁃ Linus : luks
3.
Use passPHRASE on phone, not passcode
+
DAY 2:
1.
Install Keepassxc for windows; minikeepass for iOS (encrypted password manager)
2.
List all accounts/logins/passwords
+
DAY 3:
1.
Change passwords - All of them!
2.
Use long phrases, not long passwords
+
DAY 4:
1.
Enable 2-factor authentication for all the services
⁃ https://twofactorauth.org
⁃ Token/yubi keys (get two)
⁃ App
⁃ google authenticator
⁃ 2 top
2.
Print the ZFA backup codes and put them in a safe
+
DAY 5:
1.
Review permissions in accounts
2.
Delete old conversations/chats (including WhatsApp messages)
3.
When sharing sensitive information via Signal, do it via disappearing message
+
DAY 6:
1.
Backup HD - 2 copies of your files - two hard drives!
2.
Encrypt your external HDs
⁃ Veracrypt works on multiple platforms
⁃ Write down the password and/or backup code
+
DAY 7:
1.
Rest
\ No newline at end of file