▲ 2 points

Ask HN: Single most important security practice for modern non-technical users?

by eatonphil·11y ago·5 comments·view on hn ↗

If I wanted to insist my family (of non-technical users) adhered to at least one most important security practice for using modern technology, what would it be? My first guess would be to use a different, random password for each service they use. (By random, I mean - at least - that it has no personal information: names, dates, etc.) I imagine this is important, but I'd like to be able to point off-hand at a single guideline that makes the biggest difference. Any suggestions? Do you have a similar "rule" for your spouse, parents, children?

5 comments

My security advice for non-technical users is everything here: https://paragonie.com/blog/2015/06/guide-securing-your-busin...

Namely:

    1. Even security advice should carry an expiration date!
    2. Keep every piece of software up to date.
    3. Use a password manager. Let it generate passwords for you.

I would stress the first one over the other two, but definitely mention them.

You can't be secure with one thing (what's the point of a secure password if they give their CB info on a shady website ?). Yes you can start with one thing but it will not be enough.

For my mom I opted for :

- Linux computer

- NO email

- ad blocker on her web browser

- all online payment is done with me

I'm not saying you should do this, it's just an example of "more than one thing needed".

I think it is kind of reflecting how poor the state of technology is... 2015, we have to take away _the_ way of communication "email", no fancy windows and don't let parents pay online without having an eye on it.

I completely agree that this is all correct, but... how poor, 2015. Or am I wrong?

It depends on how you see it : in the real world, murders, rapes or just thefts are still happening even in the most safe countries.

Total security is impossible (IRL and online), you just have to go with good enough security and hope you will be lucky. I know it's not an appealing answer for idealists, but if you want more than that you get a system that is even more Orwellian than what we already have.

I totally get that. It's just a lot easier to reason with someone averse to this technology when you start them off slowly. Thanks for the list, though!