3 ms·
Beyond being a warning about AI, which is helpful, you really should be taking proper security precautions anyway. Personally, I have a separate browser that ru
by theideaofcoffee 1y ago
Beyond being a warning about AI, which is helpful, you really should be taking proper security precautions anyway. Personally, I have a separate browser that runs no extensions set aside that's solely dedicated to doing finance- and other PII-type things. It's set to start on private browsing mode, clear all cookies on quit and I use it only for that. There may be more things that I could do but that meets my threat threshold for now. I go through this for exactly the reason in the tweet.
- brookst 1y agoMy bank assumes private browsing = hack attempt and makes login incredibly onerous, sadly.
- netsharc 1y agoGee, I really haven't considered your approach.. considering extensions can really be trojan horses for malware, that's a good idea.. It's interesting how old phone OSes like BlackBerry had a great security model (fine-grained permissions) but when the unicorns showed up they just said "Trust us, it'll be fine..", and some of these companies provide browsers too..
- delusional 1y ago> Trust us, it'll be fine.. That's because their product is the malware. Anything they did to block malware would also block their products. If they white listed their products, competition laws would step in to force them to consider other providers too.
- dns_snek 1y ago> If they white listed their products, competition laws would step in to force them to consider other providers too. Uh, you're describing SafetyNet and at least a dozen similar anti-competitive measures by big tech. They've been doing this for years and regulators have basically been ignoring it. DMA over on the EU side hints at this changing but it's too little too late.
- zahlman 1y ago... Your bank's site works in private browsing mode?
- sroussey 1y agoYou can use a different profile for banking and limit the extensions to be just your password manager.
- dolmen 1y agoI'm not aware of a password manager (except the browser's builtin) that allows to limit itself to only a subset of the credentials it knows. In a "banking" browser profile, I want only the banking credentials to be available to browser. In all other browser profiles I don't want the banking credentials to be available.
- sroussey 1y agoThis would be great. But today you would need to have two password managers
- deleted 1y ago[deleted]
- scared_together 1y agoI thought that incognito mode in Chrome[0] and private mode in Firefox[1] already disables extensions by default. [0] https://support.google.com/chrome_webstore/answer/2664769?hl=en https://support.google.com/chrome_webstore/answer/2664769?hl... [1] https://support.mozilla.org/en-US/kb/extensions-private-browsing https://support.mozilla.org/en-US/kb/extensions-private-brow...
- cube2222 1y agoPersonally, I only use websites like that on mobile/tablet devices with more closed-down/sandboxed operating systems (I’d expect both iOS and Android from reputable brands to be just fine for that), and recommend the same to any relatives.
- _trampeltier 1y agoI even have a separate user login for such things, a separate user for hobby things and a separate user for other things.
- deleted 1y ago[deleted]