Typically you can load the key (from the ubikey) into google authenticator too on your phone
382 karma · joined March 25, 2016
Stating it will be a full time job is such an overstatement, i'd almost call it a blatant lie. Your mom is on FB, YT, and maybe a handful of other sites daily (so no popups for those or decisions to take there). You could also monitor and log and then apply block/allow rules later for when you visit for coffee or dinner. (if you want to reply something here about unprotected in that period, think about all the new bad urls not on such url lists yet for apps like uBlock)
And i only get positive feedback how well it works and how much they learned about websites and other internet services, the information leaked to 3rd parties, cooperation between companies. Even scared some contacts i have from social media like FB, Instagram and alike. Makes them a lot more aware of what is going on instead of giving them a list of known crap urls, again, maintained by some samaritan in an attic. Nice effort, i just think its fair from sufficient nowadays on the internet. In the time it takes these people to update the list, 1000 new crap urls have been registered.
And doesn't take that much time, sure you have to put in some more time then, simply telling people to install uBlock (or similar) and tell them that they are safe and secure with this application. I prefer to educate properly instead of just throwing some half *ed solution their way and having them figure out it fails in the end anyway.
Another note, the internet is broken, broken in many ways. And _you_ know this else you would not suggest any protection, apps like uBlock.
no i don't work for or get paid in anyway by little snitch, i just love the product.
And i'd prefer the two very different functions remain separate programs, i don't need my terminal client to be vulnerable for browser issues (or vice versa).
neat stuff, i didn't know that, going to read up.
But it is not that simple. I don't consider that very likely, that you actually find that 'right' company. (and putting faith in a third party to audit your code/company, brings other risks too). And chances are that some issues will be overlooked but not by that 'weird' guy/girl in the attic that has all the time of the world to security probe you 'for free'.
And there will always be a part you can't audit properly, your employees, which often is the origin of a hack, disgruntled employees. Or even worse, a disgruntled employee of the security company that just audited you.
And keep in mind, with enough power, you can get anything offline or in a non acceptable state (half working, data compromise etc). So security companies can only help you a certain length, nonetheless it can be very helpful to have a person from outside look at things with 'fresh eyes' and see things you have overlooked for so long because you are right in the middle of it all.
I tend to find it disappointing to see a security company use google analytics on their site and leak their visitor information to a big data third party.
Is catholic church making a comeback?
Nicely written and layed out, though I would suggest to add a point that describes not including 3rd party hosted resources to prevent leaking user activity at third parties. Other way described, host all resources on your own site/url.
A comment about the carelessness of a ex employee regarding his own privacy and the reputation of the company he worked for (and yes that can be a bad thing to do, reminding somebody of that i tend to consider civil) and a hyperbolic statement regarding the accusation of 'doxing', as it just required a single google search, don't seem uncivil to me.