CYBER SECURITY KNOWLEDGE IS MORE IMPORTANT THAN EVER
CYBER SECURITY BASICS
This page contains basic overviews and guides explaining personal cyber security and risk management.
If you've never worried about this stuff or been a "tech person", you may feel overwhelmed. It's easier than you think if you let it be, and you can get extra help if you need it.
THE BARE MINIMUM
RISK MANAGEMENT
SOCIAL ENGINEERING
RISK MANAGEMENT
The number one thing to understand about cyber security (and any security in general) is that 100% safe is not possible, nor is it the goal of risk management.
Managing risks is about ensuring that the things important to you are harder to access than it's worth for the average person or whatever entity you may be worried about.
It's about
The number one thing to understand about cyber security (and any security in general) is that 100% safe is not possible, nor is it the goal of risk management.
Managing risks is about ensuring that the things important to you are harder to access than it's worth for the average person or whatever entity you may be worried about.
It's about being aware of what you can and preparing appropriately without making your life impossible in the process.
That means preparing for moments when security is breached, and accepting that you can do everything you're supposed to and still fall victim to some bullshit.
But our best chance of staying safe is proper risk management.
ENCRYPTION
SOCIAL ENGINEERING
RISK MANAGEMENT
Encryption is the only reason why privacy is possible on the internet. Without getting too technical, it's the process of encoding your data so that only you and the people you share it with can see it.
Given recent developments, it's difficult to trust any centralized technical services to keep your data safe, so choosing services where e
Encryption is the only reason why privacy is possible on the internet. Without getting too technical, it's the process of encoding your data so that only you and the people you share it with can see it.
Given recent developments, it's difficult to trust any centralized technical services to keep your data safe, so choosing services where end-to-end encryption (E2EE) is provided is highly recommended.
There are some basic tools that you always want to be using for online communications in 2025:
VPN: A tool that encrypts and hides your network traffic from your internet provider and whoever else may be snooping. NordVPN is recommended.
Messaging: Texting and basic social media messaging services are not secure and used to market to you. Using an E2EE messaging app keeps you safer.
Signal is recommended.
SOCIAL ENGINEERING
SOCIAL ENGINEERING
SOCIAL ENGINEERING
Despite mainstream media's depictions of Mr. Hackerman as a dude locked in his basement that can break into anything just by typing a few lines of code, most hacking is actually social engineering.
Social engineering is when a hacker manipulates people to gain access to systems they shouldn't have access to.
Hackers aren't afraid to prey on
Despite mainstream media's depictions of Mr. Hackerman as a dude locked in his basement that can break into anything just by typing a few lines of code, most hacking is actually social engineering.
Social engineering is when a hacker manipulates people to gain access to systems they shouldn't have access to.
Hackers aren't afraid to prey on our fears, desires, generosity, or ignorance. Anything that makes us predictable and gullible makes us a target for social engineering.
Common attacks include phishing and honey trapping.
While there are some tools like advanced email filters and adblock that can help, the best deterrent of social engineering is you being more aware of suspicious behavior and not going along with common scams.
BASIC SECURITY CHECKLIST & GUIDES
ACCOUNT SECURITY
This one should be basic by now. You need long, complex passwords and should be using a password manager across all your devices so you can be as safe as possible without having to worry about losing access.
Multi-factor authentication (MFA) is also a must now. This is when a text , security token, or some other type of verification is required in addition to your password.
EVERY SINGLE ACCOUNT that has your private or payment information should be secured.
UPDATE DEVICES & SOFTWARE
This one is free as fuck but people ignore it because they don't want to reboot their phone or computer. All device software and apps should be updated regularly in general and especially after a new vulnerability is exposed and patched.
AVOID DATA SHARING AND TRACKING
There are some services that are much, much better than others in terms of protecting your privacy. For starters, I recommend using Brave Browser and avoiding traditional search engines like google. Regardless of the services you use, us a VPN.
SECURE SENSITIVE DATA AND DEVICES
All communications should be end-to-end encrypted, and any data at rest (files and devices) should be encrypted as well.
If you have any data that's important to you, use a cloud backup and a physical one. In addition to the original storage. 3 total. Bare minimum.
BREAK UP WITH BIG TECH
It's up to you how seriously you take this one, but you want to avoid for-profit solutions and you want to use open-source as much as possible. You should realistically be off all non-work related social media, or at the very least you should have settings be I'll being posting guides on breaking up with big tech soon.
AVOID SOCIAL ENGINEERING
Once you have the technical side of your cyber security managed, you just need to maintain it and avoid any social engineering that prays on your non-technical skills.