Bogleheads.org

tuningfork

If you want "idiot-proof" any password manger will take a bit of time to get used to. They all have quirks (at least the 3 or 4 I've used did). Any of the well known password managers are secure and will provide all the basic functionality you need. 1Password, Lastpass, Dashlane, Bitwarden...

tuningfork

As a former hiring manager in a computer related field, I judged a freshly graduating candidate by their ability to demonstrate computer science knowledge relevant to the courses they took and the job they were seeking, as well as any relevant job experience they acquired during school. I never paid...

tuningfork

I looked at i-orp and RPM and played around with my own spreadsheet. I don't think there is one simple answer. It's all educated guesswork with lots of unknowable variables, so I stopped trying to find the "best" answer and just went with "close enough". Ultimately I settled on p...

tuningfork

I use 2-factor authentication on all my important accounts (those that would cause serious problems if they were compromised). I have two Yubikeys as my preferred 2FA. Most accounts let me register multiple keys, so one stays in the safe as a backup. I also use Authy for TOTP tokens. I prefer Authy ...

tuningfork

My vehicle owner's manual says to change the oil when the oil change indicator says so (about 5% oil life remaining, which ends up being around 7500 miles for my "normal" pre-pandemic driving patterns) or no longer than 12 months. I've driven so little recently thanks to the pandemic that ...

tuningfork

The only difference in functionality that I've noticed is that the BitWarden mobile app doesn't auto-fill other apps. For example, if I open my Chase mobile app, and tap the username or password field, LastPass will pop up with an "autofill with LastPass" option. I haven't been able to fi...

tuningfork

I too am giving Bitwarden a try. Lastpass data imported with no troubles, and so far it's working well on my computer browser and Android phone. Unless I run into something unexpected with Bitwarden, I expect to delete my Lastpass account in a few weeks. Before this forced upgrade by Lastpass, I had...

tuningfork

Is there an error code displayed when the update rolls back? There's probably one in some log file somewhere that may hint why it's happening. Without further information, some things I would try are to make sure your hard drive has lots of free space, and unplug any unnecessary USB devices (especia...

tuningfork

You can buy groceries at Amazon Fresh. Some items are Whole Foods prices, some are competitive with local grocery stores.

tuningfork

I don't buy from Amazon as much as I used to, but they are still a prime (pun intended) shopping destination for me. Some reasons I choose Amazon over other vendors with the same price: 5% cashback on Amazon credit card, easy returns, convenience when shopping for multiple unrelated items in the sam...

tuningfork

4171.91

tuningfork

You can see Roth conversion $ by looking at the online transaction history for the Roth IRA account. In the online account: 1. Select the Roth IRA account from accounts listed on left side 2. Click on “Activity & Orders” tab 3. Select “+ History” 4. The default will show you the account history...

tuningfork

Fidelity uses VIP access app. does anyone know if they have a backup method? What if I lose my phone with VIP access app? My phone totally stopped working earlier this year. I called Fidelity's login/VIP customer service number to activate the VIP app on my new phone. They authenticated me with the...

tuningfork

Patience is required during these extraordinary times. The sender has no control over the package once the carrier has it in possession. Since the pandemic started, I've had many USPS packages delayed by weeks during the pandemic, and it has gotten worse in the last month or two. I've seen packages ...

tuningfork

Somebody getting access to your bogleheads account gets access to your email. That's a unique identifier, so your anonymity is compromised. If I were interested in siphoning money out of other people's accounts, compromising accounts at a site like bogleheads would be a very valuable secondary obje...

tuningfork

The yubikey is a 2FA for the individual website or to be able to use 1password itself? Both. You can use a Yubikey as a second factor for 1Password itself while also using your Yubikey as a second factor for individual websites. https://support.1password.com/security-key/ Great. Do you know about L...

tuningfork

Ok, I'm considering getting this Yubikey - https://www.amazon.com/Yubico-Security-USB-Factor-Authentication/dp/B07M8YBWQZ/ref=sr_1_10?dchild=1&keywords=yubikey+bluetooth&qid=1607990656&sr=8-10 or the 5 for $20 more. But then I started thinking about what if there's a fire and it gets de...

tuningfork

The yubikey is a 2FA for the individual website or to be able to use 1password itself? Both. You can use a Yubikey as a second factor for 1Password itself while also using your Yubikey as a second factor for individual websites. https://support.1password.com/security-key/ Great. Do you know about L...

tuningfork

I'm surprised that Vanguard considers an 8 character password to be secure. If you believe howsecureismypassword.net, an 8 character password consisting of uppercase, lowercase, numeric and special characters can be brute forced in about 8 hours. That's not long if someone is targeting you.

tuningfork

Normally I'd just take shipping mistakes like this to work and pass them out to co-workers. Amazon's mistake is the team's good fortune. But we're all on remote work except for necessary on-site visits to fix a server or when authorized to pick something up from our offices that we forgot to take h...

tuningfork

Is a separate password management app better than using the ones built into Apple and Google browsers? I am a big fan of Chrome's built-in password manager (and I do IT for a living). It does everything I need it to do, it is free, it doesn't require extra software and works automatically on all my...

tuningfork

JBTX wrote: ↑Mon Dec 07, 2020 2:15 pm I have last pass and use the extension. I am never asked to login to last pass. The passwords are always available.

You should change your Lastpass security settings to logout automatically after a specified number of minutes (I use 30) and when all browser windows are closed.

tuningfork

Just to toss in something totally from left field, if you happen to have a cat in the house, it will probably enjoy sitting on top of the computer case, especially if there's a vent on top pushing hot air. This can be a problem if the power button is also on top of the case. You don't want your cat ...

tuningfork

When I shop for a vehicle, among the most important specs I look at are width, length and height to be sure it will fit comfortably in my small one-car garage. If it looks too tight, I won't consider it. I use this stop sign on a flexible stick (not necessarily this specific brand). It works very we...

tuningfork

I just donated to the local food bank, the local homeless shelter, and local meals on wheels.

tuningfork

I'm happy with Fidelity Charitable, where I've had a DAF for several years. I had some equity shares at another brokerage I wanted to use to fund the DAF. First I initiated a transfer at Fidelity to move those shares from the other brokerage into a Fidelity brokerage account. Once that was done (too...

tuningfork

I've been through that RAM timing game on some past builds. Usually some future BIOS update would fix the problem permanently to allow that specific RAM to work at default/XMP settings. Until that occurred, I would have to remember to reenter the RAM timings any time I did something that reset the B...

tuningfork

A week or so ago I noticed a "Flash plug-in blocked" message on the citicards.com login page. Citi still uses Flash? Wow. Makes me less likely to use their credit cards. I have noticed it on Discover Bank's site, too. The block doesn't seem to affect my usage of either the Citi or the Dis...

tuningfork

Uninstall it. There is absolutely nothing important that still uses Flash. The long, slow death was to give developers and webmasters time to build replacement apps using modern, secure technology. A week or so ago I noticed a "Flash plug-in blocked" message on the citicards.com login page...

tuningfork

One kind of TOTP spoofing I've read about is via a man-in-the-middle phishing attack. You might get a phone call from "your bank" during which they ask you to verify your identity by reading your TOTP code to them, similar to how a credit card company may ask you your CVV2 code to verify ...

tuningfork

Yes, but that sort of attack is going to work against any form of 2fa that isn't a u2f key. I was specifically asking about a SIM swap type attack using the Symantec app. As far as I know SIM swap attacks are unrelated to Symantec VIP, just as they're unrelated to standard TOTP apps. The cell phone...

tuningfork

Symantec VIP is just a proprietary wrapper over standard TOTP 2FA. Same pros/cons, but added hassle. I wish they'd add U2F support. Huh, explains its behavior. Still, exactly how is it going to be spoofed again? It's not like they can have a low level cell phone employee swap a sim card. So, I'd im...

tuningfork

U2F is absolutely worth it if you can use it. TOTP 2FA? If it makes you feel better, whatever. We phish RSA, Duo, Azure AD 2FA, Google Authenticator and SMS 2FA systems with 75+% success rates on every campaign we run. The irony is people trust phishing sites even more when they get the app / SMS 2...

tuningfork

I used to buy H&R Block early when the email offers started arriving. The last two years I ignored them and bought on Black Friday for a substantial discount. Just have to watch for the deals: Amazon, Walmart, Newegg or others should all have very low prices on Black Friday. The best place to fi...

tuningfork

Try running a Malwarebytes scan. It can find malware that ordinary anti-virus apps don't. Run task manager (as mentioned in earlier in the thread), go to the detailed view for Processes, click on the CPU column to show the highest CPU using process, and set the Always on Top option, and leave it vis...

tuningfork

On the subject of cases, are there any concerns about RF interference with those clear / tinted covers? ... It's a major reason I'm going with a full metal case (not a clear cover). Am I overly concerned? That seems like a valid concern, and I see it's been brought up by many people on other forums...

tuningfork

If you go with liquid cooling, make sure the case you buy has space for the radiator. Case reviews on gaming sites usually will mention where radiators can fit, and some cases may include that info in their specs. The PC I'm using now, built 6 years ago, has a Kraken X61 liquid cooler. It has two bi...

tuningfork

I went through my decades of accumulated paper statements last year, many of which were old enough to have social security numbers. Since recyclers tend not to like shredded paper, I tried to minimize what I shredded. I tore off the part of each page that had personal sensitive info, shredded those ...

tuningfork

I just built a new PC for my girlfriend a few weeks ago. She wanted something mid-range for work at home and future hobby/business when she retires in a few years. She researched pre-built PC's she thought would work for her, to give me a range of power and price. Her budget was considerably higher ...

tuningfork

Thank you. I don't get any of the detailed information that you mention on haveibeenpwnd: when I click on the word 'breached' in their sentence 'Pwned on 3 breached sites and found 1 paste (subscribe to search sensitive breaches)' I just get to a page with a definition of breach (which I don't full...

tuningfork

What I do HATE is any site that requires the use an E-mail address for the user-id. Hear! Hear! Fortunately more-and-more sites are allowing anything as a username so I use KeepassXC to generate two, unique, very complex "passwords" of different lengths. One I use as the username and the ...

tuningfork

And another edit: https://haveibeenpwned.com gives you a an overview if your account/email address has been leaked. Tried it: my email address was: Oh no — pwned! Pwned on 3 breached sites and found 1 paste (subscribe to search sensitive breaches) Am I in any danger in practice now? What should I d...

tuningfork

And another edit: https://haveibeenpwned.com gives you a an overview if your account/email address has been leaked. Tried it: my email address was: Oh no — pwned! Pwned on 3 breached sites and found 1 paste (subscribe to search sensitive breaches) Am I in any danger in practice now? What should I d...

tuningfork

One complicated password for all is fine. But eventually, web sites require you to change passwords anyway. No no no no no no no no no no no no no no no no no no no no no no no no no no no no no If you do this, your password is only as secure as the weakest site you use. You have no way of knowing ...

tuningfork

Did you use the same password on Instagram and other sites? If so, change the password on all those sites now, and make them unique. One way password hacks like this occur is by a password database leak somewhere. Depending on that site's security, anyone using dictionary words or other commonly use...

tuningfork

It's most likely that someone else has simply mis-typed their ID and can't figure out why "their" password doesn't work. :oops: Then how did it come to MY email instead of that someone elses? It they had an issue with their password, the reset message would go to THEIR email. They are mis...

tuningfork

I used Microsoft Office at work from about 1994 until I retired from Megacorp 7 years ago. I used it at home as well until a license change didn't allow me to install it at home. I started using OpenOffice at home, then switched to LibreOffice, and continued using LibreOffice my first few years of r...

tuningfork

4. Online store with weak protection was hacked probably and card used to order Chipotle pick up order I have to laugh at this one. They go to all the trouble of either running the hack or, more likely, buying the credit card number on the black market, and then all they do is order Chipotle. Credi...

tuningfork

From this page: https://www.amazon.com/ap/forgotpassword?openid.assoc_handle=anywhere_us&pageId=anywhere_us&mn=0 Has your email or mobile number changed? If you no longer use the email or mobile number associated with your Amazon account, you may contact Customer Service for help restoring a...

tuningfork

I keep this card because of no foreign transaction fees. Though I don't currently expect any international travel for the foreseeable future, it still comes in handy for the occasional online purchase at a non-US website.

Search found 561 matches