PSA: in light of recent cyberattacks and vulnerabilities, I recommend everyone:
* use a good password manager (1Password) and do not duplicate passwords
* use two factor auth for everything important (not via sms!! Google Authenticator or better yet YubiKey)
* Auto-updates on, and restart weekly so they actually install
* Freeze your credit
* Get an IRS Identity Protection PIN
* Get your cell carrier to give you a port-out PIN or number lock that makes the carrier refuse to move your number without the PIN
You can ask your claude code to audit what on your laptop is out of date and needs updating.
Conversation
Post your reply
I was just last night asking Claude "so, uh, what do normal people do here". This seems like a good list
What’s the point of yubikey when most services give you backup alternate SMS? Doesn’t that defeat the purpose? I wish I could disable SMS
yes there's not much point if backup alternative sms always works
Built for multi-generational living: private bedroom wing, laundry, and a 400 sq ft deck.
so other people can't open credit cards or take out loans using your stolen identity
Turn on extra security for your google account landing.google.com/advancedprotec
Probably just delete a bunch of old accounts and generally purge data from a bunch of places if possible
Backup bank account/withdraw some cash
Standard prepper stuff in case supply chains struggle
- Print any important documents you only have digital copies of
- Consider holding a couple months' expenses in cash or some other highly liquid physical asset
A lot of financial site do not allow any cloud based passkey system (google or apple), and even fewer support yubikey. If they have passkey system it is via their own app?
Further, authenticators are not passkeys.
1password is not safe lol
Quote
Matthew Green
@matthew_d_green
Replying to @kmad and @matthew_pines
I think we might lose public key cryptography.
Agent logs are 100x larger. Need logging with fast, simple queries at any scale. Your dumbest coding model can’t mess it up
Great list. Until the last line.
"Ask your claude code to audit your laptop"
= give a networked agent read access to the machine with your password manager, SSH keys and session cookies.
Today of all days :D
Local model, least privilege. Or do it yourself.
explore this please and lmk next steps we can take for credit/IRS and cell carrier lockdowns
1Password gives you watchtower which will audit your passwords.
consider these for myself, double check the suggestions for validity and suggest other alternatives that may be better.
