Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- 1.Phone Providers
- Never Use a phone on anything. Using a phone as a security option is the worst possible to choice, you might as well give the hacker your password.... the reason why not to use your phone is because your carrier ( t-mobile,sprint,verizon,at&t, etc) can be used by people to social engineer a support agent and will get your calls / text messages fowarded to their google voice number. One the hacker has control over your phone they can just enter the code that is generated for two step and gain access to your emails / social mediums.
- 2.Database Dumps
- Databases dumps are basically databases that have been taken over by hackers and will include sensitive information such as passwords,emails,phone numbers,location,etc. You should be using a unique / generated different password for each social medium you create. Also do not have a notepad on your computer with any data. Write down your passwords / codes / emails in real life on a notepad or stick note. If people have your pass to 1 thing that you use it can just get worse from their.
- 3. Verifying Personal information
- People can gain access to info from companies such as amazon , paypal, ebay, netflix, apple or any other company.
- Each site has different security measures, so to stay on the safe side try making each email unique so people will not be able to guess it. if they just know your email, dob, and name its easy to social for other info such as your full address,city,state,zip, cell / home number last 4 of cc's. Everything you store in your accounts is vulnerable of getting. So try to use a Po box if you do not feel comfortable using your real address on your accounts.
- 4.Backup tokens / auth codes / email information
- Using gmail or hotmail as a email provider is the way to go.... there is no phone support so people can not try to social engineer for your information or a account takeover. you can use backup codes in case you forget your password. Never have a phone or a backup email that is a internet service provider or a email provider in general that can be social engineered.
- Emails not to use
- Aol.com / aim they verify by last 4 digits of card on file or by security question answer, which can be easily found or socialed from a employee.
- comcast.net the easiest email provider to takeover with just phone number / address you can get the account number, last bill, last 4 of ssn etc.
- yahoo uses a form to fill out and all you need is email subscriptions that you receive and subjects of recent sent messages and they will give you a temporary password reset.
- Solutions for passwords
- Basically use sites like
- https://1password.com/
- http://passwordsgenerator.net
- to check to see if your email has been compromised you can go here
- https://haveibeenpwned.com/
- Even if your email is not in any listed databases on that site does not mean your safe,
- Start from scratch take 1 account at a time and make a new email for it / complex password.
- this might take a good couple hrs but in the long run its worth it.
- You will be safe from getting anything valuable to you from being compromised.
Add Comment
Please, Sign In to add comment
