[masraum]

Originally Posted by jyl

I'd like to talk about what you do to guard against cyber-threats e.g. hacking, data theft, email interception, password compromise, ransomware, etc.

This is in your home or small business. Not asking what big companies with lots of IT staff do.

Do you, for example:
- Use a hardware firewall or other security device on your network?
I have one, but don't use it. I might. My current router has a built in firewall
- Run certain software security or anti-malware apps?
when I was on Windows, I ran their free malware defender or whatever it's called. On my Mac now, nothing.
- Routinely connect through VPNs when not at home/office? or always?
no vpn
- Regularly encrypt emails or attachments?
nope
- Encrypt local storage or cloud storage, backups, etc?
nope
- Use precautions or special process for inbound communications?
I don't have any inbound. When I did I was able to VPN into my network and I had a firewall with specific inbound rules.
- Have a password or 2FA strategy or helper apps?
TFA for places that offer it. A regular password (not even a good one) on my PC. Websites get decent passwords.

How do you do it - e.g. if you use a security device or email encryption, which ones?

I run pihole to block bad/questionable domains.

I run no script and ublock origin. I primarily run Firefox then if something doesn't work, I'll check Chrome, and then if I have to, I'll check Safari (or when I had Windows, IE)

Now on my Mac, I do something that I'd never done on my Windows box. My regular login does NOT have admin rights. I have a separate admin account.

When I ran windows, I'd go through and "harden" it by disabling any services that I didn't need (so much crap is turned on by default). On top of closing some holes, the machine generally runs better.