3 ms·

Well all the best practices in the article, are ok, in 2006. Nowadays there are many more treats, entry points (hint: browser setup and plugins), and more auth

by txutxu 13y ago

Well all the best practices in the article, are ok, in 2006. Nowadays there are many more treats, entry points (hint: browser setup and plugins), and more authentication methods than "passwords". We have even evidences of major upstream compromises. In resume: for me the article is a little bit short in scope.

StavrosK 13y ago
This is meant for casual users. For power users, the advice would be "never use a computer again because you can trust NOTHING EVER".
- txutxu 13y ago
  OK. But that you cannot defend yourself of NSA, until you're in an enemy country or something like, does not mean, that you cannot protect yourself against all the rest of the world. Using a master password, implies the clipboard (on average). Does anybody trust desktop browsing over linux, assuming that clipboard usage on Xorg is in some way safe? it's convenient, but not safe. If I try to tell best-practices to a user of mine, I try to group all my experience and knowledge, before compile to user slang. Even if for casual users, short in scope (for my personal taste). And maybe too many prose, a more direct style maybe better to stamp on the user mind a list of best practices.
  - StavrosK 13y ago
    What are your best practices?
    - txutxu 13y ago
      0) Do not publish your best practices 1) ... :-) If you want a more serious response, at least, talk to the user about attacks that remains exposed, and keywords to the solution, if I resume too much.
      - StavrosK 13y ago
        Well, that certainly is better advice than mine! :P