c/cybersecurity-tips

The USB killer I tested on my own old laptop in Denver

I plugged a $29 USB killer into my 2012 ThinkPad just to see what would happen and it fried the motherboard in under 2 seconds, so now I always check any charging cable from a hotel room, has anyone else actually tested one of these things on their own hardware?

0 comments

reese_brown•1d ago

Two factor auth on everything, I was wrong about it being a hassle

For like 3 years I refused to turn on 2FA for anything except my main email. Thought it was a pain, always needing my phone around. Then last month I saw my cousin's Facebook get taken over while we were hanging out in Austin. Watching him lose access to his bank and Venmo in real time was rough. He had no 2FA on any of it, and the recovery process took him a whole week. That same night I went home and enabled it on every account that offered it, even my gaming stuff. The time difference is nothing honestly, maybe 10 extra seconds a day. Has anyone else held out on 2FA for a long time and then switched after seeing something happen close to home?

1 comments

faithwalker•3d ago

Vent: my 2FA app vanished after a phone update, locked out of my own accounts

Updated my phone last Tuesday and the authenticator app reset itself with no backup codes saved. Had to spend 3 days on support calls with my bank and email provider to prove I'm me. Anyone else back up their 2FA seeds somewhere physical, or am I the only one who learned this the hard way?

0 comments

paulw87•4d ago

Question about password managers after a neighbor's close call

My neighbor Dave got his email hacked last Tuesday because he used the same password for his bank and his gaming forum, and someone scraped it from a breach list. I told him to grab a password manager and he laughed, saying he'd rather just write things down in a notebook, which honestly scared me more. Has anyone here actually convinced a stubborn friend or family member to switch, and what finally worked for them?

0 comments

derekward•6d ago

Hotel wifi hacked my brother's bank account, here's what happened

My brother was at a Hilton in Nashville and jumped on the free lobby wifi without thinking. Two days later, someone cleaned out $400 from his checking account using a card he only used on that connection. Turns out it was a fake network set up by a guy at the bar, not the hotel's official one. Do you guys check the exact network name before connecting, or just take whatever's strongest?

1 comments

clairem47•8d ago

My 2FA backup codes sat in a drawer for 3 years until last Tuesday

I always thought backup codes were a joke. Setup for my email was a pain, so I printed them and forgot about it. Then my phone died at a hotel in Austin and I needed my bank app for the deposit. Recovery without the codes took 2 hours and a video call with support. Now I keep them in my wallet and in a password manager, and I test one code every 6 months. Anyone else had to eat crow about their backup plan?

0 comments

jennysullivan•9d ago

My password manager locked me out during a job interview

Last Tuesday I had a video interview at 2 PM and my password manager decided to log me out of everything, including the email with the meeting link. I spent 40 minutes answering security questions while my cat walked across the keyboard and muted me twice. Has anyone else had their own security tool betray them at the worst possible moment?

1 comments

patricia_green21•11d ago

Saw a scary demo of a public wifi hack at a coffee shop in Austin

Last Friday I was killing time at a coffee shop on South Congress and this guy at the next table ran a quick demo. He set up a fake hotspot with the same name as the shop, waited for someone to connect, and showed me their login traffic in plain text. It took him maybe 10 minutes with a cheap laptop. I always thought public wifi was sketchy but seeing it live made it real. Now I only use my phone hotspot for anything with a password. Has anyone else seen one of these demos and changed their daily habits?

1 comments

reese_brown•11d ago

PSA: My free VPN trial logged my traffic for 2 weeks before I noticed

I downloaded a free VPN from a random ad in June to watch a show on a work trip. The fine print said it kept usage logs for 'service improvement' and I almost missed it. After 2 weeks I checked my router's DNS settings and saw requests going to a server I didn't set up. Switched to a paid one that costs 5 bucks a month and ran a leak test the same day. Has anyone else caught their VPN rerouting stuff without telling them?

1 comments

taylor668•11d ago

Paid for a password manager for 3 years, just switched to the free one

I shelled out 180 dollars total on a premium password manager subscription since 2022. Last month my bank flagged a login from another state, turns out the manager had a breach notice I ignored. The free tier of the same service covers all my devices and autofill, zero reason to pay. Anyone else drop cash on something a free option handles just fine?

1 comments

king.stella•11d ago

My router's firmware update turned my whole home network upside down

Last month I finally hit update on my router after putting it off for like 2 years. The admin page kept nagging me about security patches but I figured my network was fine, nothing important on it. After doing it, the whole thing reset to factory settings and I had to set up my WiFi name and password from scratch. My smart plugs and the garage door opener all lost their connection, took me a whole Saturday afternoon to get everything re-paired. The weird part is that the new firmware fixed a bunch of weird lag spikes I used to get when streaming from my bedroom. I checked the release notes and there were 14 fixes for known vulnerabilities, some of them from 2021. Has anyone else avoided updates out of laziness and then had the network actually run better after the hassle? How do you decide when a firmware update is worth the pain?}

1 comments

henry604•13d ago

Shoutout to the guy who yelled at me over a shared printer

Last month at the office on 5th and Main, this guy watched me type my password into the login screen and said, 'you really think that's safe?' then walked off, but he never once mentioned that I'd left a sticky note with the same password under the keyboard for 6 weeks, so has anyone else had someone criticize their habits while ignoring the bigger breach sitting right there?

1 comments

kevin_dixon•15d ago

TIL my password manager was only protecting me from myself

I read on a security blog last week that over 60% of breaches come from reused passwords, so I finally checked mine and found I'd used the same one on 14 sites. The detail that flipped me was how fast bots test stolen credentials, like within minutes of a data dump going public. Anyone else run that audit and feel stupid about their own habits?

0 comments

sagep19•16d ago

Fake SMS phishing texts got me twice before I checked the actual URL

Got a text at 11pm claiming my package was stuck at a USPS depot in Phoenix, and I clicked the link twice before realizing the real sender number was a 10-digit cell, not a 5-digit short code, has anyone else gotten fooled by these?}

1 comments

mila_perry13•17d ago

Ditched my password manager for a physical key and now I'm locked out of my own email at 2am

I picked a YubiKey over a password manager last month because I thought the hardware was safer, but now I can't access my main account after my dog knocked the key off the desk and it vanished, has anyone else survived this kind of key loss nightmare?

1 comments

sethc14•17d ago

Why does nobody talk about SMS backup for 2FA apps?

Everyone raves about Authy or Google Authenticator, but I went with a YubiKey for my main logins after a friend in Denver lost his phone and got locked out of his bank for 3 days. Sure, it was $50 and a pain to set up, but I've had zero lockouts in 8 months since. Has anyone else ditched app-based codes for hardware keys?

1 comments

lisa5•17d ago

PSA: Stop screenshoting your 2FA backup codes into your notes app

My neighbor lost his bank account to a SIM swap last month because he had all his recovery codes sitting in Apple Notes. I get that password managers look scary, but a screenshot is literally the first place a thief checks. Has anyone else had to help a friend dig out of this mess?

1 comments

spencerm46•18d ago

The password reset advice that locked me out for 3 days

My old IT buddy swore I should use a passphrase with numbers and symbols mixed in, so I made one like 'Goat$2024Trail!'. Then my work laptop updated and the keyboard switched layouts, and I couldn't type the $ symbol anymore. I spent 3 days guessing combos before realizing the issue. The irony is the simple 8-character password I used before never gave me a problem. Why do experts push complexity when it just creates new failure points? Anyone else had a clever password backfire like that?

2 comments

elliot45•18d ago

A guy at a coffee shop tried to 'help' me with 2FA and made it worse

Last month in Austin, I was at a coffee shop resetting my work login and the guy next to me leans over and says, 'You keep typing your password wrong, let me show you a trick.' Before I could stop him, he grabbed my phone and started tapping through my authenticator app, clicked the wrong code, and locked me out for 30 minutes. The barista had to unplug the router to get my app to resync, and the whole time he kept saying, 'It worked for my nephew's gaming account.' Has anyone else had a stranger try to 'fix' their security settings mid-lockout? I still don't know if he was a genius or a disaster.

1 comments

elizabethtaylor•20d ago

TIL password managers fixed my worst habit in 3 days

I used to reuse the same password for everything, even my bank and email. Last Tuesday I finally set up Bitwarden after my coworker in Denver kept nagging me about it. Three days later I changed all 47 logins to unique random strings and I honestly didn't expect it to feel that easy. The auto-fill on my phone made it painless, so now I'm confused why I waited 5 years. Has anyone else had that moment where you realized the tool was the whole problem and not your discipline?

2 comments

margaret_jackson73•20d ago

Why is everyone so obsessed with 2FA apps?

I don't get the push to use those authenticator apps when a simple hardware key does the same job without the phone dependency. Last month my coworker got locked out of his bank because his phone died mid-trip, has anyone else dealt with that hassle?

2 comments

jake_owens•21d ago

Password managers vs memory, a coworker made me question everything

My sysadmin buddy Dave said he remembers 40 unique passwords and thinks managers create a single point of failure, but I've had 3 accounts hacked in 2023 using reused ones. Which side are you on, do you trust your brain or a vault app more?

2 comments

verar21•21d ago

Talking to my 14 year old cousin about her leaked passwords

So yesterday I was helping my aunt set up her new laptop and my little cousin walks in bragging about how she shared her Netflix password with five friends. I asked her if any of them had two-factor authentication turned on, and she just stared at me like I was speaking another language. That got me thinking, kids today grew up with everything already logged in on phones and tablets, so they never learned the basics of password hygiene. I sat with her for like 20 minutes showing her how to use a password manager and why she should never reuse the same pass for her school account and her bank app. She actually asked me why I cared so much, and I told her about a buddy who lost $400 last year from a phishing email that got into his old social media. Has anyone else tried explaining cybersecurity to a teenager lately and gotten that same blank look? For now I just set up a family password vault for all of us, but I dont know if she will actually use it.

2 comments

dianas50•22d ago

My old router finally gave up after 8 years

Last Thursday my home router just stopped broadcasting the Wi-Fi signal, dead as a doornail. I had to dig out my 2016 backup model from a closet and run with that until a new one arrived. Has anyone else hit a wall with aging gear that seemed fine until one random afternoon?

2 comments

elliot45•22d ago

Switched my password manager after a breach scare, the old way felt reckless

I used to keep everything in a notes app on my phone, you know, the same one synced to my laptop, total nightmare waiting to happen. Last month a buddy at a gym in Austin got his accounts drained because he did the same thing, so I moved to a local vault with offline encryption. Now I rotate my critical logins every 60 days and use a hardware key for my email, which felt like overkill at first but not after seeing the damage. Has anyone else ditched the convenience route for something clunkier but safer, and was it worth the extra hassle for you?

2 comments