FedSearch - Federated network search engine

Morten :pipverified: · @netrom

11 followers · 97 posts · Server infosec.exchange

With it being #BlackFriday and all, I hope nobody is caught up in scams or phishing attacks while doing their (frantic!) online #shopping.

Here are a few #security and #privacy tips that I hope will help somebody:

1) If you have a coupon code, don't follow a provided link to the shopping page. Instead find the page yourself, e.g., via a #searchengine, and then input the coupon code manually.

2) Access online shops without being logged in, and without any #cookies, such that the shop cannot set prices according to #personaldata or previous purchases (yes, they do that). Except, of course, if the discount is only available when actually having an account. Attempt anonymously first.

3) An improvement to 2) is accessing online shops via #TorBrowser or similar.

4) Use a #VPN such that #ISPs and other adversaries cannot obtain or spoof information. It also protects your data, like credit card info, if you are using public a #WiFi (never do that without VPN).

5) As corollary to 4) you can even sometimes get discounts by using a different location than your own.

6) Use a #passwordmanager for your credentials such that they can be longer and harder to guess/crack. This also means you don't have to remember (or even know) them by heart.

7) Setup #MFA for your accounts such that, together with 6), it is harder for adversaries to break in and steal data and/or make automated purchases on your behalf if possible. It is highly advisable using an authenticator app instead of code-by-SMS. For further protection, you can even use #biometrics, like #fingerprints or facial scans. And/or a hardware device supporting #FIDO2/#U2F or similar.

Note that these tips are applicable also when not shopping, and I would encourage them all.

Stay safe and have an awesome Friday!

#mastodontips #feditips #profiling #personalidentifyinginformation #pii #internetserviceproviders #tor #multifactorauthentication #2fa #twofactorauthentication #yubikey