The mother of all breaches: why we should never use the same password for different accounts.
https://cybernews.com/security/billions-passwords-credentials-leaked-mother-of-all-breaches/
If you're worried about hackers getting at your (or your LO's) ID or financials, you mostly need to worry about your passwords.
For example, if you play the very popular online game Words With Friends2, please note that Zynga was one of the organizations whose data was recently breached. If you use the same pw for your Zynga login as you do for other accounts, this is what makes you vulnerable.
You can protect yourself as much as possible if you just do this:
"...use strong, hard to guess passwords, enable multi-factor authentication on all important accounts, keep an eye for phishing and spear phishing attempts, check for password duplicates and immediately set up new protection for accounts that share the same passwords." (Excerpted from the above article).
What is phishing and spear phishing?
You should know this if your LO has social media accounts (think FaceBook) because they are vulnerable:
https://www.digitalguardian.com/blog/what-is-spear-phishing-defining-and-differentiating-spear-phishing-and-phishing
I use a password keeper called 1Password. They have never had a data breach in the 10+ years I have used them for my business and personal password storage. Other password keeper apps exist. Having one is better than not.
I was inspired to post this info from reading posts by desperate family members trying to prevent their cognitively impaired LOs from losing all their money to relentless cyber scammers. It breaks my heart because it is mostly preventable.
"An ounce of prevention is worth a pound of cure."
- Benjamin Franklin
11 Comments
Popular Questions
Related Questions
- How to help take over finances, when one parent is susceptible to scams and the other considers shopping her respite?
- Father with Parkinson's refuses to accept he's being scammed.
- Not a question, but information.
- My mom had to sell her home and move in with family. I want to build a small house for her in our backyard. Can she use her money to fund it?
Thanks for sharing this info. Hopefully, people will become more aware on how to prevent scammers.
Obviously it should be broadened to include the online exploitation of the vulnerable no matter the age.
That post earlier this week about celebrity scammers and those two women being extorted hit home with me. I found it very upsetting.
I am going to close my Facebook account. I don’t need to see videos of kittens that badly.
I think concerned citizens should complain to their elected representatives to do something about this. But I’m not holding my breath that anything will be done.
I myself get porn-extortion emails every month to my business account ("Hello pervert, we know what websites you've been visiting...pay us to this crypto account or else blah blah") which means that some of my info in some breach at some time was purchased. I can't change my business email easily so I just ignore those threats that I know are BS.
Many people and organizations are already complaining to the government -- it can only do so much. It certainly can't do anything preventative. That's our job. The biggest problem is that the hackers are very very good at not being found (generally) and therefore, not being punished.
Start using passkeys to get into your accounts. I just set one up for my PayPal account.
"Unlike a password, a passkey relies on a string of encrypted data stored in your phone or laptop and verification from you, through a face scan, a fingerprint scan or a PIN code, to access a website or app. There’s no exchange of a password at all."
Source: https://www.cnbc.com/2023/11/07/how-to-switch-from-passwords-to-passkeys.html#:~:text=It%27s%20called%20a%20passkey%2C%20and,already%20adopted%20the%20new%20technology.
It is specific to each of your devices. Passkeys keep the phishers out.
Apple, Google and Amazon.com are going to be my next passkey set-ups...
Basically in the login credentials box (and if that organization uses passkeys) it will ask, "Do you want to set up a passkey?" When you click "yes" an message box usually pops up to say that a passkey is being created, and then another message to say it's complete. That's it. Nothing to change, edit, update, write down, etc. Then the next time you navigate to that website it will automatically log you in if you're using the same device.
My 1Password app can automatically generate super strong random passwords but I rarely use it because in the past I've wanted to be able to login and out fast and easily, since I do our business admin, and manage care for 3 people, I login and out of websites all day long. Even the autofill function of 1Password sometimes fights with my keychain function on my Mac laptop. Now with passkeys I don't have to deal with any of that. I can't wait for every website with a login to have passkeys.
I don't find passwords that tough to save because I don't have that many and I often make them phrases out of songs so that each site kind of has a "song for it". Often when I go onto sites even not having to log in, such as FB, I will say my password to myself. Sets it in real solid so far.
I come from that generation that had to memorize poems and such in school, so the memorization gene is almost always activated.
Of course the brain is no longer young at 81--that's for dang certain.
I so agree with Geaton that we have to stay as computer literate, as tech savvy as we are able but I have to admit I guestion how long I will be "able". Other countries seem much better at demanding that techs be interchangeable and adaptable with one another, but in the USA we are all over the place--so scattered. Seems it's the American way.
I do think that WWIII is going to be about taking down the tech and hacking into it. We will be good and helpless, esp. the young who do EVERYTHING by tech.
In the end, the person is the weak link. So hopefully I won't get a wild hair one day because I have paranoia from yet-to-be diagnosed dementia and decide to change the most important password. But at least I know it is recoverable with the PoA authority and secret key code that I gave them.
In regards to WWIII... I personally think the younger tech-savvy generation will figure out ways to get around a tech shut-down or ban. Just because we can't imagine it doesn't mean that they can't. Plus, here in the U.S. there are plenty of people who live "off the grid' with their own power supplies. There's an entire secret internet in China and also Russia (we employed a Chinese national for 5 years and she used it all the time). The Anonymous hacker group (remember them?) would spring into action. Hate them or love them, they'd be a force to reckon with. It would still be a fight, but never underestimate Americans, and a determined global resistance IMHO.
https://www.cnbc.com/2022/03/16/what-has-anonymous-done-to-russia-here-are-the-results-.html