FabSwingers.com forum: Online Security

By *inky-Minx OP Woman
over a year ago

Grantham

I'm sure most people know about online security, strong passwords etc.

And will even school their children to, quite correctly, not put too much personal information on the internet.

Yet every day I am genuinely surprised to see the people of the Fab forums giving away potentially personal information.

Sure nobody might know your real name etc. but small snippets of info can add up to a big picture.

The answers to so many, seemingly innocent, threads can give away basic security info for online accounts. For example, your porn name = first pet and mother's maiden name.

And all of this is publicly viewable on the internet, one doesn't even have to be logged in.

All I'm saying is think and be careful. Perhaps even Google the 'German Tank Problem'

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

See that’s the thing when it comes to them I never set it to the right thing

In fact I had company before hang up the phone on me because off my awner

I set them to like

Favourite place

Get to fuck you not me

Try saying that over the phone and watch them hang up

Reply privately

Reply in forum

Reply +quote

By *inky-Minx OP Woman
over a year ago

Grantham

"Get to fuck you not me

That's your first pet's name?

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

"Get to fuck you not me

That's your first pet's name? "

Something along those lines

That was just a example off the kind off things I set it to ha ha

Reply privately

Reply in forum

Reply +quote

By *inky-Minx OP Woman
over a year ago

Grantham

"Get to fuck you not me

That's your first pet's name?

Something along those lines

That was just a example off the kind off things I set it to ha ha "

I'd never thought of that, though I can see it might be difficult to remember what you've set

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

Also fazing has been a thing off the past for a long time

When people are willing to hand everything over legitimately

The new two

Are set up a fake company and pay FB cheap rate for data

Or carte a quirky little app that go viral and leaches everything out the phone

Russia has all ready got everyone data thanks to a face change app that was

Found to be carted by the Russian government and was download 5.5 million times

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

"Get to fuck you not me

That's your first pet's name?

Something along those lines

That was just a example off the kind off things I set it to ha ha

I'd never thought of that, though I can see it might be difficult to remember what you've set

Save them on a off line usb drive that way if I ever need them I just look at the text document on the usb drive in a offline evenment

Reply privately

Reply in forum

Reply +quote

By *inky-Minx OP Woman
over a year ago

Grantham

"Also fazing has been a thing off the past for a long time

When people are willing to hand everything over legitimately

The new two

Are set up a fake company and pay FB cheap rate for data

Or carte a quirky little app that go viral and leaches everything out the phone

Russia has all ready got everyone data thanks to a face change app that was

Found to be carted by the Russian government and was download 5.5 million times "

Just the sort of thing I would avoid

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

"Also fazing has been a thing off the past for a long time

When people are willing to hand everything over legitimately

The new two

Are set up a fake company and pay FB cheap rate for data

Or carte a quirky little app that go viral and leaches everything out the phone

Russia has all ready got everyone data thanks to a face change app that was

Found to be carted by the Russian government and was download 5.5 million times

Just the sort of thing I would avoid

Was big news back in 2019 easy to find the news posts about it just google face change Russian and you find the new about it

Reply privately

Reply in forum

Reply +quote

By *ealitybitesMan
over a year ago

Belfast

I asked this exact question in the Irish forum last week and why people choose to ignore certain things on here because it's "all a bit of fun".

It's not just the info that people share in the forums, it's the fab stortellers who have made a name for themselves by telling other people's stories.

I've had people I've never spoken to before contact me on the back of something I post here and give me private details about other posters either because they want to impress me by being in the know or they expect me to react.

I've also witnessed fabbers at social events sharing the real names of others who aren't attending and telling private experiences that they were entrusted with.

This is not a place to let down your guard in. It's a sharing not a caring community.

Reply privately

Reply in forum

Reply +quote

By *inky-Minx OP Woman
over a year ago

Grantham

"I asked this exact question in the Irish forum last week and why people choose to ignore certain things on here because it's "all a bit of fun".

It's not just the info that people share in the forums, it's the fab stortellers who have made a name for themselves by telling other people's stories.

I've also witnessed fabbers at social events sharing the real names of others who aren't attending and telling private experiences that they were entrusted with.

This is not a place to let down your guard in. It's a sharing not a caring community. "

Yes this is so true

Reply privately

Reply in forum

Reply +quote

By *iscean_dreamMan
over a year ago

Llanelli

Yes and things like your first car or colour of it, people need to be really careful and remember what back up security questions they have chosen in the past just in case

Reply privately

Reply in forum

Reply +quote

By *inky-Minx OP Woman
over a year ago

Grantham

"Yes and things like your first car or colour of it, people need to be really careful and remember what back up security questions they have chosen in the past just in case "

Agree, especially as the average 'security check' asks for you name, address and email address

Reply privately

Reply in forum

Reply +quote

By *agerMorganMan
over a year ago

Canvey Island

Problem is, and I speak from experience working in the Cyber-Security sector, the lack of awareness and having it drilled in.

Now, awareness only goes so far, but there’s tools out there which can pull your data together into an easy to read format.

On top of that, another tool like CUPP (Common User Password Profile) is scarily accurate in guessing peoples passwords, just from what people post online.

People have zero idea how easy it is to get your personal data in one place and grab your passwords.

Reply privately

Reply in forum

Reply +quote

By *inky-Minx OP Woman
over a year ago

Grantham

"Problem is, and I speak from experience working in the Cyber-Security sector, the lack of awareness and having it drilled in.

Now, awareness only goes so far, but there’s tools out there which can pull your data together into an easy to read format.

On top of that, another tool like CUPP (Common User Password Profile) is scarily accurate in guessing peoples passwords, just from what people post online.

People have zero idea how easy it is to get your personal data in one place and grab your passwords.

Exactly this, though I put it less technically

Reply privately

Reply in forum

Reply +quote

By *agerMorganMan
over a year ago

Canvey Island

"Problem is, and I speak from experience working in the Cyber-Security sector, the lack of awareness and having it drilled in.

Now, awareness only goes so far, but there’s tools out there which can pull your data together into an easy to read format.

On top of that, another tool like CUPP (Common User Password Profile) is scarily accurate in guessing peoples passwords, just from what people post online.

People have zero idea how easy it is to get your personal data in one place and grab your passwords.

Exactly this, though I put it less technically

I did a live presentation at work a while back & grabbed a senior execs data. Boy did their face drop

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

"I'm sure most people know about online security, strong passwords etc.

And will even school their children to, quite correctly, not put too much personal information on the internet.

Yet every day I am genuinely surprised to see the people of the Fab forums giving away potentially personal information.

Sure nobody might know your real name etc. but small snippets of info can add up to a big picture.

The answers to so many, seemingly innocent, threads can give away basic security info for online accounts. For example, your porn name = first pet and mother's maiden name.

And all of this is publicly viewable on the internet, one doesn't even have to be logged in.

All I'm saying is think and be careful. Perhaps even Google the 'German Tank Problem'

I have also thought about this. While for most people it’s just a fun game remember the face changing app a few years ago?

Reply privately

Reply in forum

Reply +quote

By *inky-Minx OP Woman
over a year ago

Grantham

"I did a live presentation at work a while back & grabbed a senior execs data. Boy did their face drop

I bet, reality can be the best teaching tool

Reply privately

Reply in forum

Reply +quote

By *inky-Minx OP Woman
over a year ago

Grantham

"I have also thought about this. While for most people it’s just a fun game remember the face changing app a few years ago? "

Yes it was mentioned above. I missed that but I'd never have downloaded that sort of thing anyway thankfully

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

totally agree too many people give to much info on fab simple things like your job can narrow you down ...photos of uniforms ....

we were at a local club once and in its carpark there was a guy taking reg numbers of cars n campers ... he was a swinger from the club but rumors were he was a cop too hence access to car reg = home adress.names....

never trust anyone until trust is earnt

Reply privately

Reply in forum

Reply +quote

By *ealitybitesMan
over a year ago

Belfast

People are often surprised in here about how others can find them on social media so easily. I'm more surprised that they are surprised especially when it's so easy to join the jigsaw pieces.

Reply privately

Reply in forum

Reply +quote

By *lexeatonMan
over a year ago

Lichfield

All this paranoia ... but anyone ever asked Fab Admin why they are using Google Analytics?

You can be as careful as you like, but unless you're using Tor or equivalent and completley isolating your browsing then the dots CAN be joined I'm afraid.

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

vpn and firefox & duckduckgo browser

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

"I'm sure most people know about online security, strong passwords etc.

And will even school their children to, quite correctly, not put too much personal information on the internet.

Yet every day I am genuinely surprised to see the people of the Fab forums giving away potentially personal information.

Sure nobody might know your real name etc. but small snippets of info can add up to a big picture.

The answers to so many, seemingly innocent, threads can give away basic security info for online accounts. For example, your porn name = first pet and mother's maiden name.

And all of this is publicly viewable on the internet, one doesn't even have to be logged in.

All I'm saying is think and be careful. Perhaps even Google the 'German Tank Problem'

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

"Problem is, and I speak from experience working in the Cyber-Security sector, the lack of awareness and having it drilled in.

Now, awareness only goes so far, but there’s tools out there which can pull your data together into an easy to read format.

On top of that, another tool like CUPP (Common User Password Profile) is scarily accurate in guessing peoples passwords, just from what people post online.

People have zero idea how easy it is to get your personal data in one place and grab your passwords.

Growing up not being computer literate or savvy

Reply privately

Reply in forum

Reply +quote

By *ablo minibar123Woman
over a year ago

"Also fazing has been a thing off the past for a long time

When people are willing to hand everything over legitimately

The new two

Are set up a fake company and pay FB cheap rate for data

Or carte a quirky little app that go viral and leaches everything out the phone

Russia has all ready got everyone data thanks to a face change app that was

Found to be carted by the Russian government and was download 5.5 million times

Just the sort of thing I would avoid

Was big news back in 2019 easy to find the news posts about it just google face change Russian and you find the new about it"

I must have missed that. This is what happens when I only rely on Essex tom for news reports

Reply privately

Reply in forum

Reply +quote

By *rontier PsychiatristMan
over a year ago

Coventry

In my old job I used to like to go wonder the different departments, have a tea and chat. A certain department that specialised gathering information and putting it together gave me a crash course in this. They asked me a couple of very basic details of a freind of mine and said comeback in 30 mins. I did, they had a picture of them, their house, where they work, a bit about their family and more. I asked them what special database or system did they access? They say nope, just used the open source Internet. And that was back in the early 2000s. There's so much more resources, websites and tools these days.

Reply privately

Reply in forum

Reply +quote

By *ophieslutTV/TS
over a year ago

Central

There was a site a couple of years ago that when you entered passwords, it told you wether they had been compromised and thus were used by hackers. Some of mine were. It's good to get a wake up call

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

"There was a site a couple of years ago that when you entered passwords, it told you wether they had been compromised and thus were used by hackers. Some of mine were. It's good to get a wake up call

'Have I been pwned'

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

This is why my cat is called Alluppercasenospaces

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

To prove I could, I once tracked down someone’s location from 2 photos and 1 bit of info. My friend sent a couple of photos and said hello from x (where x was an part of Sweden), and I found her using Google maps and comparing a couple of reference points n the pics, it was easy. Privacy is a huge issue for people and most don’t realise how little they have online. When was the last time anyone here paid money to Google or Facebook, yet they’re in the top 10 biggest companies of all time, and it’s all built on selling you

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

Its why the privacy statements on profiles mean nothing. Any one can reverse image search, screenshot, copy, etc any pics here.

I heard that any passwords under 11+ digits without 3 different elements (letters, numbers, symbols) are easy to be cracked by password hacking software, but not sure if that's true.

Also there are apps to remotely log on to your phone's camera... Thats the 1 that terrifies me!

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

Pah good luck!!

I’m pretty comfortable knowing that no information I post online will give any clues as to my password being PaSsWoRd123.

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

"Its why the privacy statements on profiles mean nothing. Any one can reverse image search, screenshot, copy, etc any pics here.

I heard that any passwords under 11+ digits without 3 different elements (letters, numbers, symbols) are easy to be cracked by password hacking software, but not sure if that's true.

Also there are apps to remotely log on to your phone's camera... Thats the 1 that terrifies me!

The way passwords are hacked these days doesn’t involve someone trying loads of attempts until they get it right any more, they just steal the encrypted password that they can’t use, and literally compare it to a have list of every possible combination that’s been pre-encrypted and look for a match. They literally look up your password from a list. Admittedly the list is enormous but you can buy it, no need to spend years encrypting all the combinations live and checking, you buy the 8 character password rainbow list, or the 9 character etc, and it’s a piece of piss. Meaning three things: a) what you choose as your password is meaningless in terms of complexity, character substitution etc, the only thing that makes your password safer is making it longer, b) password reuse is super dodgy and unsafe and c) your online safety is essentially as safe as the systems of the people you have passwords for.

So if you reuse a the same shorter password all over, the chances of one of the places having shit security are almost certain and you have already been hacked

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

"Its why the privacy statements on profiles mean nothing. Any one can reverse image search, screenshot, copy, etc any pics here.

I heard that any passwords under 11+ digits without 3 different elements (letters, numbers, symbols) are easy to be cracked by password hacking software, but not sure if that's true.

Also there are apps to remotely log on to your phone's camera... Thats the 1 that terrifies me!

So if you reuse a the same shorter password all over, the chances of one of the places having shit security are almost certain and you have already been hacked "

Thanks for this. So length & where you put your bits is key

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

I might start a thread on password health, it’s not the same as the OPs social engineering security topic

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

"There was a site a couple of years ago that when you entered passwords, it told you wether they had been compromised and thus were used by hackers. Some of mine were. It's good to get a wake up call

'Have I been pwned'"

Google can also do this automatically

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

"Its why the privacy statements on profiles mean nothing. Any one can reverse image search, screenshot, copy, etc any pics here.

I heard that any passwords under 11+ digits without 3 different elements (letters, numbers, symbols) are easy to be cracked by password hacking software, but not sure if that's true.

Also there are apps to remotely log on to your phone's camera... Thats the 1 that terrifies me!

So if you reuse a the same shorter password all over, the chances of one of the places having shit security are almost certain and you have already been hacked "

You dont need to buy any lists really. Github has alot of them. Kali linux itself normally comes with a few lists including Rockyou.txt, which isnt a Rainbow Table like you mentioned but a plain text word list. But is still very effective

Reply privately

Reply in forum

Reply +quote

By *inky-Minx OP Woman
over a year ago

Grantham

"I might start a thread on password health, it’s not the same as the OPs social engineering security topic "

Anything that helps is good

Reply privately

Reply in forum

Reply +quote

By *inky-Minx OP Woman
over a year ago

Grantham

I thought it might be a dull topic and possibly get ignored but everyone's input so far has been great.

The

name

Reply privately

Reply in forum

Reply +quote

By *pursChick aka ShortieWoman
over a year ago

On a mooch

Never use a related word to anything personal to you. A phrase that makes sense to you is preferable and changeable per app / website so unique.

Reply privately

Reply in forum

Reply +quote

By *inky-Minx OP Woman
over a year ago

Grantham

"Never use a related word to anything personal to you. A phrase that makes sense to you is preferable and changeable per app / website so unique. "

Definitely, you hear people say thy use the same one so they don't forget

Reply privately

Reply in forum

Reply +quote

By *adyJayneWoman
over a year ago

Burnleyish (She/They)

My trick is a 3-6 word passphrase (Google xkcd correct horse battery staple)

This is one of the times I wish I could link eternally, hive dot io have a great blog/chart about password security

Reply privately

Reply in forum

Reply +quote

By *inky-Minx OP Woman
over a year ago

Grantham

"My trick is a 3-6 word passphrase (Google xkcd correct horse battery staple)

This is one of the times I wish I could link eternally, hive dot io have a great blog/chart about password security"

Why share your trick

You'll need to change it now.

Reply privately

Reply in forum

Reply +quote

Post new Message to Thread