opsec – Terence Eden’s Blog

There's nothing you can do to prevent a SIM-swap attack

By @edent · CyberSecurity mobile opsec sim · 5 comments · 450 words · read ~417 times.

Photo of a nano SIM card and its plastic housing.

It is tempting to think that users are to blame for their own misfortune. If only they'd had a stronger password! If only they didn't re-use credentials! If only they had perfect OpSec! If only...! Yes, users should probably take better care of their digital credentials and bury them in a digital vault. But there […]

Continue reading →

Who can I hire to hack me?

By @edent · hacking opsec security · 250 words · read ~5,615 times.

GitHub screenshot "Insert your security key Press the button on your security key device to finish signing in. If it does not have a button, just re-insert it."

I use a password manager. I have 2FA set up on everything. When an organisation asks me to set a recovery question, I generate a 32 character passphrase. I don't use my mother's maiden name or my first pet's birthday on anything sensitive. I monitor my email addresses for breaches, and I regularly check my […]

Continue reading →