Hex_case
Newbie
- Jul 14, 2022
- 17
- 30
I recently saw a post about someone here on BWH who got their website hacked and since I have experience in, and I am currently studying for certifications in Cybersecurity, I thought it would be nice to share what I know.
The basics:
- Do regular backups and have a plan in case shit hits the fan. -> There is no such thing as a completely secure website/server/network etc...
- Do not reuse your passwords. -> I can't stress this enough! The main reason being that if a website gets hacked and the say the email and passwords gets leaked, all your other account will now be at risk. Sometimes these leaks end up easily available online, and that's really not a great thing.
- Use capital letters and symbols and numbers in your passwords, and make them long. -> A password with 8 lowercase characters has 208,827,064,576 different possibilities, one with 8 characters that are a mix between lowercase, uppercase, symbols and numbers has 576,480,100,000,000 different possibilities. Make it 12 characters, and it's now at 13,841,287,200,999,999,537,152 different possibilities. It makes it nearly impossible to brute force with current technology.
- Use two-factor authentication where available. -> I know it's a pain, but it's also very difficult for hackers to get around.
- Keep up with the updates. -> Often times when a vulnerability is discovered, companies will create a patch as quickly as possible to prevent it from being exploited, but they can't (usually) force you to make these updates.
- Don't get phished. -> If only it was that easy. I suspect most of you on here know how to avoid phishing, but it still does happen to the best of us. A good habit to have is that if you receive an email from say Youtube, Twitter, your bank, etc... Go directly to the website rather than opening the link. Another habit is to look at the email of the sender because most if not all big companies have their own email domain. Anyway, I won't get into much details, if you guys want more tips about this just let me know.
Right, that's all the free time I've got right now, but I will make another post with more specific stuff, please feel free to ask me questions and I will do my best to answer.
TL;DR Use different complex passwords for everything, use 2fa, do backup, do updates and don't buy male enhancement pills regardless of the convincing email.
The basics:
- Do regular backups and have a plan in case shit hits the fan. -> There is no such thing as a completely secure website/server/network etc...
- Do not reuse your passwords. -> I can't stress this enough! The main reason being that if a website gets hacked and the say the email and passwords gets leaked, all your other account will now be at risk. Sometimes these leaks end up easily available online, and that's really not a great thing.
- Use capital letters and symbols and numbers in your passwords, and make them long. -> A password with 8 lowercase characters has 208,827,064,576 different possibilities, one with 8 characters that are a mix between lowercase, uppercase, symbols and numbers has 576,480,100,000,000 different possibilities. Make it 12 characters, and it's now at 13,841,287,200,999,999,537,152 different possibilities. It makes it nearly impossible to brute force with current technology.
- Use two-factor authentication where available. -> I know it's a pain, but it's also very difficult for hackers to get around.
- Keep up with the updates. -> Often times when a vulnerability is discovered, companies will create a patch as quickly as possible to prevent it from being exploited, but they can't (usually) force you to make these updates.
- Don't get phished. -> If only it was that easy. I suspect most of you on here know how to avoid phishing, but it still does happen to the best of us. A good habit to have is that if you receive an email from say Youtube, Twitter, your bank, etc... Go directly to the website rather than opening the link. Another habit is to look at the email of the sender because most if not all big companies have their own email domain. Anyway, I won't get into much details, if you guys want more tips about this just let me know.
Right, that's all the free time I've got right now, but I will make another post with more specific stuff, please feel free to ask me questions and I will do my best to answer.
TL;DR Use different complex passwords for everything, use 2fa, do backup, do updates and don't buy male enhancement pills regardless of the convincing email.
