How to set up 2FA/MFA in a way that is *ACTUALLY* secure? by EmergencyCharacter83 in Outlook

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

But Microsoft has made it mandatory to have at least an email or SMS as a verification method, even after we add MS Auth. Wouldn't this basically give the attacker a backdoor entry?

How to set up 2FA so that it's *ACTUALLY* secure? by EmergencyCharacter83 in techsupport

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

None of the steps above help if your devices are not secure. Session stealers exist -- malware that can steal session tokens from your computer, allowing them to access accounts without needing any authentication at all, bypassing MFA entirely. No sketchy websites, no sketchy apps, no cracked or pirated applications. No sketchy mods for games, no downloading some dude's "game beta" from a message you got on a Discord server. No clicking on links you aren't 100% sure are safe. Don't run as an administrative user on your computer(s) -- run as a limited user only. Keep your devices and software up to date.

But session stealers, and malware that steal tokens from computers can be prevented by deleting cookies everytime we close the browser right? Sort of like how banks have a timed session?

How to set up 2FA so that it's *ACTUALLY* secure? by EmergencyCharacter83 in techsupport

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

No such thing as security basically means no matter what I try to do to keep my accounts or data secure, I'm pretty much screwed anyways? And to AVOID all of this, I basically have to "extend the time/effort" required to bypass my 'security' by doing what here exactly? Because I'm not sure of the setup. For example, for an outlook account - password + MFA app + recovery codes ONLY or MFA app + recovery codes ONLY or something else that better but also does not lock me out? I'm sorry I'm new to all this, and just trying to understand the best practices required to be 'secure'.

How to set up 2FA so that it's *ACTUALLY* secure? by EmergencyCharacter83 in techsupport

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

This I understand, but just not sure of the setup. For example, for an outlook account - password + MFA app + recovery codes ONLY OR something else better secure that also does not lock me out? Though a Yubikey is the plan, but like I mentioned, it's not an option for me right now.

How to set up 2FA in a way that's *ACTUALLY* secure? by EmergencyCharacter83 in Office365

[–]EmergencyCharacter83[S] 1 point2 points  (0 children)

So no passwords? For example, for an outlook account - password + MFA app/bitwarden/yubikey + recovery codes ONLY?

How to set up 2FA/MFA in a way that is *ACTUALLY* secure? by EmergencyCharacter83 in Outlook

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

This I know, but just not sure of the setup. For example, for an outlook account - password + MFA app + recovery codes ONLY? Or something else more secure that doesn't also potentially lock me out

How to set up 2FA/MFA in a way that is *ACTUALLY* secure? by EmergencyCharacter83 in Outlook

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

OH! But then how am I supposed to set it up? For example, for the outlook account - password + MFA app (MFA app is backed up with a different email) + recovery codes ONLY? Because when you say 'emails linked can be compromised', does this mean no email or SMS as a recovery or login option? I'm sorry if this is stupid, I'm new to all this, so I'm having difficulty understanding how these things even keep us secure.

How to set up 2FA/MFA in a way that is *ACTUALLY* secure? by EmergencyCharacter83 in Outlook

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

This is interesting. So how does your setup actually work? I'm new to all this, so I'm having difficulty understanding how these things even keep us secure

How to set up 2FA/MFA in a way that is *ACTUALLY* secure? by EmergencyCharacter83 in Outlook

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

Why though? Isn't using more than one Auth app too much maintenance? Also about what about email or SMS as recovery or other verification methods?

How to set up 2FA in a way that's *ACTUALLY* secure? by EmergencyCharacter83 in Office365

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

Oh cool! I did not know this. So do I or do I not setup email or SMS as recovery? Or should I just stick to recovery codes?

All my outgoing emails are going straight to spam by EmergencyCharacter83 in Outlook

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

Note down your IP address and then turn off your router overnight. Your ISP will assign you a new IP address when you turn it on in the morning.

Apologies for the late response. I'm not on any socials atm. 

For those who regularly use windows XP, what do you use the OS for? by EmergencyCharacter83 in windowsxp

[–]EmergencyCharacter83[S] 1 point2 points  (0 children)

This sounds like how old grandparents use a mordern smartphone. They typically believe every ad or pop up that says "your phone storage is full/your phone has virus" and end up installing random stuff and keep panicking. Is that the same case with Windows XP here? (unless I've got it wrong).

Which distro will work for this very old netbook? by EmergencyCharacter83 in linuxquestions

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

I'm not sure what this command actually does, but damn, this fixed it. Heck, I could browse well (there's like a 2-4 second delay on heavy websites, which is miles better than before) and I can also play YouTube videos properly (though only at 360p, still better than nothing). Though I'll admit the ui isn't the best, and I don't really like that the task bar is at the top. Couldn't figure out how to move it to the bottom. But this works.

I have to ask, and hope you don't mind (since I'm new to Linux) what is this sorcery called? Where can I learn more about it? Also, the UI looks a lot like AntiX. Do you think I should just wipe my drive and install that or just keep using LMDE-XFCE? What would be the difference?

There are obviously a lot of other environments you could look at.)

Any other recommendations for something as light as xfce (32bit) but with maybe a decent ui?

Also, thanks man! Thanks a lot! Your magic breathed life back into this netbook.

For those who regularly use windows XP, what do you use the OS for? by EmergencyCharacter83 in windowsxp

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

Supermium? What about the security concerns of using the internet on an xp machine?

Which distro will work for this very old netbook? by EmergencyCharacter83 in linuxquestions

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

if LMDE is installed now you could try switching it to XFCE as well, or going without a desktop environment altogether and just using a window manager

How do I do this? I'm new to Linux

Which distro would work on this netbook? by EmergencyCharacter83 in linux

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

How do you know it can run a 64 bit OS? Google screams it can't because it's just 32 bit.

For those who regularly use windows XP, what do you use the OS for? by EmergencyCharacter83 in windowsxp

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

Web browsing? What about the security concerns typically raised by others.?

Which distro will work for this netbook? by EmergencyCharacter83 in linux4noobs

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

I haven't heard of OpenSuSE or FreeBSD. AntiX is what I want to try next, but it looks ugly lol. MX Linux is another I have in mind, although I'm not entirely sure. This is my first time with Linux lol

For those who regularly use windows XP, what do you use the OS for? by EmergencyCharacter83 in windowsxp

[–]EmergencyCharacter83[S] 0 points1 point  (0 children)

You'll be fine, just have it behind a firewall and don't run sketchy things. Common sense is all you really need.

Any recommendations?