4 ms·
> Your primary email account should be from a provider who has been around a long time and takes security seriously. My recommendations are Gmail or Outlook. I
by Jiejeing 5y ago
> Your primary email account should be from a provider who has been around a long time and takes security seriously. My recommendations are Gmail or Outlook.
Is this a joke? What are you going to do if google suddenly goes ballistic on your account as it is regularly the case? Yes, your email should not be burner-grade, but there are plenty of valid options that don’t go into the centralized internet monoculture (not to mention companies with a terrible track record like google).
I do not have much to say on the other parts of the article, except that disk encryption should be way higher on the list.
- tgsovlerkhgsel 5y ago> What are you going to do if google suddenly goes ballistic on your account If you're a package maintainer for anything reasonably big: You tweet, and the problem gets solved. > disk encryption should be way higher on the list. Disk encryption is relevant only against a relatively rare threat. First, physical attacks are still relatively rare. Second, it only helps against one-shot, detectable physical attacks against a shutdown system. As soon as the attacker can tamper with the system without you noticing, most common FDE (especially on Linux) won't protect you.
- remram 5y agoLosing access to your account means you can't push new versions. Eventually your users have to manually move to other software or forks (by you or somebody else). If you account gets compromised (because your domain expired for example), someone else can push a new malicious version that your users will automatically install and run.