A few months ago I hosted a cybersecurity "Ugh Day" (a group chore day) for my friends.
The format worked so well I think everyone should steal it:
1. List the accounts/devices that would be most devastating to lose… bank, email, phone, etc.
2. For each one, find its “weakest link” an attacker could use to get in.
3. Turn those into a todo list and fix them.
We found things like:
- someone was using their phone without a password. and their phone had unrestricted access to email and 2fa. meaning if they lost their phone someone could steal everything.
- someone was using as their recovery email an insecure Hotmail account made at age 10
- someone was still using as their ex lover’s email as a recovery email
So much low hanging fruit to fix!
I think a lot of people feel dread and avoidance around personal security, doing this together really helped.
it’s an excellent time to weave resilience into your communities, friendships, families