5 ms·

> The biggest scare I've gotten is somehow ending up on "colnbase.com" (instead of "coinbase.com"). You might want to install some browser extensions to block

> The biggest scare I've gotten is somehow ending up on "colnbase.com" (instead of "coinbase.com"). You might want to install some browser extensions to block content. Then block all content (set to whitelist) and selectively add the sites you know. If you end up on a new site with some amalgamation of letters that look familiar, the extension will rightfully block it and prompt you whether you want to whitelist or not. Big ole' red flag right there. Of course it's not foolproof. It is just another layer in the strategy of defense-in-depth.

eviks 2y ago
This is such a waste of time to do this for every single site! Especially when it's easier to rely on the password manager in cases like this
- omoikane 2y ago
  What I do is a greater waste of time -- I have a separate browser profile for each individual site that I might log into, and javascript is only whitelisted for that one site in that profile. It's a real pain because whenever my browser adds a new config option, I have to update the settings in each of the ~20 profiles. It has saved me a few times where some rogue javascript tries to redirect me to some unexpected site, and the destination site simply doesn't load.
  - devsda 2y ago
    I think there's a Firefox extension for this usecase. Combining that with Multi-account container should make it easier to manage ?
  - LordGrignard 2y ago
    dude what how do you have so much free time my lazy ass just has ublock origin with some lists enabled that my even more techbro help me set up and it automatically stops me from visiting suspicious websites this feels like way too much work
    - psd1 2y ago
      And Firefox is such a pain to automate I just want every new machine to have my extension settings, but then it's four hours later and I'm trying to check if some policy file was obsoleted in version 60 Such a time sink
  - account42 2y ago
    Sounds like uMatrix (RIP) with extra steps.
- inetknght 2y ago
  > This is such a waste of time to do this for every single site! That's your opinion. But it works for me and doesn't take much time at all to wield. > Especially when it's easier to rely on the password manager in cases like this Passwords aren't the only thing this helps guard. Password manager won't prevent the site from loading in the first place. So if that site delivers malware then your password manager won't help you.
  - eviks 2y ago
    That's your opinion that it works for you, but more importantly, that it would work for others instead of teaching them to automatically click "yes" after clicking a link to a site they want to visit after having to do this hundreds of times for all those hundreds of sites they had to visit before, so a supposedly big red flag could be nothing more than one of those brown cookie gdpr annoyances

eviks 2y ago

This is such a waste of time to do this for every single site! Especially when it's easier to rely on the password manager in cases like this

omoikane 2y ago
What I do is a greater waste of time -- I have a separate browser profile for each individual site that I might log into, and javascript is only whitelisted for that one site in that profile. It's a real pain because whenever my browser adds a new config option, I have to update the settings in each of the ~20 profiles. It has saved me a few times where some rogue javascript tries to redirect me to some unexpected site, and the destination site simply doesn't load.
- devsda 2y ago
  I think there's a Firefox extension for this usecase. Combining that with Multi-account container should make it easier to manage ?
- LordGrignard 2y ago
  dude what how do you have so much free time my lazy ass just has ublock origin with some lists enabled that my even more techbro help me set up and it automatically stops me from visiting suspicious websites this feels like way too much work
  - psd1 2y ago
    And Firefox is such a pain to automate I just want every new machine to have my extension settings, but then it's four hours later and I'm trying to check if some policy file was obsoleted in version 60 Such a time sink
- account42 2y ago
  Sounds like uMatrix (RIP) with extra steps.
inetknght 2y ago
> This is such a waste of time to do this for every single site! That's your opinion. But it works for me and doesn't take much time at all to wield. > Especially when it's easier to rely on the password manager in cases like this Passwords aren't the only thing this helps guard. Password manager won't prevent the site from loading in the first place. So if that site delivers malware then your password manager won't help you.
- eviks 2y ago
  That's your opinion that it works for you, but more importantly, that it would work for others instead of teaching them to automatically click "yes" after clicking a link to a site they want to visit after having to do this hundreds of times for all those hundreds of sites they had to visit before, so a supposedly big red flag could be nothing more than one of those brown cookie gdpr annoyances