Staying Safe Online

Tools of the Trade

Ad / Script Blocker

Ad / Script Blocker - Why Use One

Ad / Script Blocker - Why Use One

Ad / Script Blocker - Why Use One

Faster page loads

Ad / Script Blocker - Why Use One

Avoid "Malvertising" campaigns

  • news.yahoo.com
  • huffingtonpost.com
  • aol.com
  • weather.com
  • sports.yahoo.com
  • startribune.com
  • centurylink.net
  • entertainment.verizon.com

2015 Victims

Ad / Script Blocker - Options

Adblock Plus

Ads

Scripts

Ghostery

Ads + Scripts

Privacy Badger (EFF)

uBlock Origin

Ad / Script Blocker - Downsides

Site Blocking

Can break some sites

Password Manager

Password Manager - What Is It

Generates secure passwords

Stores them all securely

Auto-fills usernames/passwords on websites

Password Manager - 1Password Demo

Password Manager - Why Use One

Good passwords should be hard to remember

For reals example: CP3QsgEA40Tx

My LastPass Vault: 358 accounts

Password Manager - Options

Online

LastPass

Dashlane

Offline

KeePassX

Free, Premium - $12/yr

Free, Premium - $40/yr

Free, open-source

Password Manager - Downsides

Phone needed for unfamiliar computers

Need to have super-strong master password / 2FA device

2 Factor Authentication

(2FA)

2 Factor Authentication - What Is It

Popular implementation of Multi-factor authentication

  • Something you know
    • Password
  • Something you have
    • USB Tokens
    • Cards
  • Something you are
    • Fingerprint
    • Retina

2 Factor Authentication - Why Use It

Hackers need more than just your password

Password essentially useless without 2FA code

2 Factor Authentication - Google services instructions

2 Factor Authentication - Options

Google Authenticator App

SMS

Hardware Token - Yubikey

2 Factor Authentication - Downsides

Need code when signing into account from untrusted computer

Takes ~30 seconds longer to login to untrusted computer

Can pre-generate codes from app

2 Factor Authentication - Who Offers It

twofactorauth.org

All the "big sites"

  • Google's services
  • Amazon
  • eBay
  • Microsoft's services
  • Apple's services
  • https://blog.malwarebytes.org/threat-analysis/2015/01/major-malvertising-campaign-hits-sites-with-combined-total-monthly-traffic-of-1-5bn-visitors/
  • https://en.wikipedia.org/wiki/Multi-factor_authentication
  • https://blog.malwarebytes.org/threat-analysis/2015/01/major-malvertising-campaign-hits-sites-with-combined-total-monthly-traffic-of-1-5bn-visitors/

Articles

Pics

  • https://bd23.https.cdn.softlayer.net/80BD23/142.4.51.106/blog/wp-content/uploads/2015/08/cnn_ad_blocking_results_firefox.png
  • http://www.mozilla.cz/wp-content/uploads/2015/07/Adblock-Plus-logo.png
    http://www.n-droid.de/wp-content/uploads/2014/12/Ghostery-Browser-Logo.png
    https://www.eff.org/sites/all/themes/badger/badger-stroke.png
    https://raw.githubusercontent.com/gorhill/uBlock/master/doc/img/icon38@2x.png
    https://inbound.org/discuss/is-it-time-that-google-removed-forbes-from-search
    http://geneabloggers.com/wp-content/uploads/2013/09/Lastpass.jpg
    http://screenshots.en.sftcdn.net/en/scrn/3338000/3338284/dashlane-12-535x535.png
    https://www.keepassx.org/images/kpx_logo_main.png
  • https://www.yubico.com/wp-content/uploads/2014/09/YubiKey-NEO.png
  • https://lh5.ggpht.com/c6cKdTJeblAdoXGVnrG3FjJLv5fdv6UvN4sdRsLH4NNNmQc0OmZOxp-LxdEx8Coq5S8=h900
  • https://support.1password.com/articles/browser-extension/keyboard-shortcut.gif
  • https://thenextweb.com/wp-content/blogs.dir/1/files/2015/02/google-2fa.png

Online Extensions

By Dan

Online Extensions

  • 395