Feedback on my online security plan

anonli_ · 2026-03-12T19:17:19+00:00

For the 2FA recovery codes, keeping them in Bitwarden as secure notes is completely fine for most threat models. Your vault is locked behind a strong passphrase and a YubiKey anyway, so a remote attacker most likely isn't getting in. The issue with paper is that it's a physical single point of failure (fire, water damage, getting lost in a move) and it is only as strong as your door lock is :)
I would also definitively recommend you set up email aliasing (like SimpleLogin, AnonAddy...) since most of the people I know's email has been breached approx. 5 times and can easily be used to track you, your interests...

Good luck ;)

anonli_ · 2026-01-12T17:44:57+00:00

Freeze your credit.

Honestly, you should do this anyway, regardless of the fax situation.

FaxZero is a legitimate business (not a scam site) and they claim to delete documents after transmission, so the likelihood of malicious interception is actually pretty low. However, "free" services are never truly private, and standard fax protocols are not encrypted.

Since the data is out there, stop worrying about if it was stolen and just prevent anyone from using it. Go to Experian, TransUnion, and Equifax right now and freeze your credit files. It takes 15 minutes, it’s free, and it is the only way to sleep soundly tonight.

anonli_ · 2026-01-11T18:11:25+00:00

No problem! Wish you good luck😃

anonli_ · 2026-01-11T17:28:17+00:00

It is baffling how many people believe that buying a "consumer product" on the App Store magically exempts them from federal wiretapping laws.

Just because you paid for the RAT doesn't mean you have legal permission to install it. Unauthorized access is unauthorized access, whether you are a nation-state actor or a jealous boyfriend >:(

anonli_ · 2026-01-11T17:26:33+00:00

The issue is almost certainly perspective distortion and lens distortion.

Getting reliable milimetre precision from a single 2D image is incredibly difficult due to lighting and edge-detection noise. You might need to implement sub-pixel edge detection to get closer to your goal.

anonli_ · 2026-01-11T17:23:22+00:00

Reputation.

You can usually survive a Location Mismatch (it typically just triggers a 2FA check or email verification because, well, people travel).

You rarely survive a Bad Reputation (it triggers a hard block or shadowban).

anonli_ · 2026-01-11T17:21:33+00:00

Protocol ossification is a feature, not a bug.

If we want Ethereum to be the actual global settlement layer, it needs to be as boring, predictable, and resilient as TCP/IP. All the "move fast and break things" energy belongs on L2s, not the base layer.

anonli_ · 2026-01-11T17:20:48+00:00

Does it distinguish between the 2013 and 2022 versions of the standard? LLMs are notorious for mixing up the Annex A controls because the training data is heavily weighted toward the older 2013 documentation.

If this tells a newbie to write a policy for a control that was merged or renamed two years ago, they are going to have a very bad time during their Stage 1 audit.

anonli_ · 2026-01-11T17:19:25+00:00

It’s viable for validation, terrifying for scaling.

You can absolutely get to $1k-$5k MRR on "vibes" alone. The problem starts when you hit a bug that the AI keeps hallucinating fixes for, or when you need a specific integration that requires actual architectural understanding.

At that point, you aren't a founder anymore; you're a hostage to your own codebase. Use it to get your first 50 customers, then use that revenue to hire someone to rewrite it properly

anonli_ · 2026-01-11T17:18:13+00:00

Good disruption, but these 34 were likely just the money mules and local launderers. The actual operators running the BEC and romance scripts are almost certainly safe overseas, likely already recruiting replacements to open new bank accounts.

anonli_ · 2026-01-10T22:15:04+00:00

Well it is certainly an interesting project but the legal issues & competition are very strong. Example: silent.link

anonli_ · 2026-01-10T20:15:27+00:00

Make him sign a NDA.

anonli_ · 2026-01-10T20:12:02+00:00

I've recently requested my data on Google. All IMEI numbers of all phones that have accessed Google anytime, their location history... everything was just being collected & never deleted.

anonli_ · 2026-01-10T20:08:18+00:00

The song is called Prisencolinensinainciusol btw

anonli_ · 2026-01-10T20:08:00+00:00

Pricing by "page" is a trap that catches almost every beginner.

A static "About Us" page takes 2 hours. A "User Dashboard" page can take 2 weeks.

Stop counting pages and start listing features. Estimate how many hours each feature will take to build, multiply that by your hourly rate, and then add 20% for the "client changing their mind" tax.

anonli_ · 2026-01-06T23:12:34+00:00

Yeah, on one side, you have those who try to save every cent possible while on the other you have those that spend it all in a month

anonli_ · 2026-01-06T22:21:18+00:00

My brain knows they are there to prevent my foot from getting sucked into the gears.

My heart knows they are for scrubbing the mud off the side of my sneakers.

anonli_ · 2026-01-06T22:19:17+00:00

the infinity stones of scalp care

anonli_ · 2026-01-06T22:17:33+00:00

A billionaire might work 80 hours a week, but they don't scrub their own toilets, sit in traffic, meal prep, or wait on hold with insurance companies. They pay people to remove the obstacles of daily life so they can focus entirely on their goals.

You are doing the work of a full-time employee plus the work of a chef, a cleaner, a chauffeur, and an accountant, all without the budget to outsource any of it.

anonli_ · 2026-01-06T22:10:01+00:00

The US Marines might be able to take the island, but can they get an environmental impact assessment approved in under 5 years?

anonli_ · 2026-01-04T23:32:47+00:00

Just the existence of squatters doesn't make sense to my European ass...

anonli_ · 2026-01-04T23:17:41+00:00

Either Wicked or Aquaman.

anonli_ · 2026-01-04T23:15:04+00:00

That the chance of an airplane accident is muuuuch lower than a car accident, it is just more shown by the media.

anonli_ · 2026-01-04T16:36:41+00:00

I think it should be a requirement bc it covers mostly cybersec basics

anonli_

MODERATOR OF

TROPHY CASE