Information security best practices, including: - software updates - Experimental Chrome flags - HTTPS + HSTS - ad blocking - password managers and 2FA - device and disk encryption xkcd: https://xkcd.com/538/ Password manager roundup: https://www.pcmag.com/article2/0,2817,2407168,00.asp

1. Information
security

2. Paul Schreiberpaulschreiber@gmail.com
@paulschreiber

9. tradeoffs

10. continuum

11. average people✔

13. under government surveillance

14. under government surveillance
whistleblowers

15. under government surveillance
whistleblowers
political campaigners

16. under government surveillance
whistleblowers
political campaigners
activists

17. under government surveillance
whistleblowers
political campaigners
activists
celebrities

18. under government surveillance
whistleblowers
political campaigners
activists
celebrities
victims of stalking and violence

22. password reuse✔

23. password reuse✔
password guessing✔

24. password reuse✔
password guessing✔
lost and stolen devices✔

25. password reuse✔
password guessing✔
lost and stolen devices✔
phishing✔

27. corporate espionage

28. corporate espionage
criminal gangs

29. corporate espionage
criminal gangs
zero-day exploits

30. corporate espionage
criminal gangs
zero-day exploits
Mossad, CIA, MI6, NSA

32. memorizing
passwords

33. memorizing
passwords

34. password
managers

37. Create View Edit Delete Web Sync 2FA Mac Windows Linux iOS Android
Chrome ✔ ✔ ✘ ✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔
Firefox ✘ ✔ ✔ ✔ ✘ ✔ ✘ ✔ ✔ ✔ ✔ ✔
Safari ✔ ✔ ✔ ✔ ✘ ✔ ✔ ✔ ✘ ✘ ✔ ✘
browser password management

39. Preferences > Passwords

41. chrome://flags

42. chrome://settings/passwords

44. about:preferences#privacy

45. security
questions

46. “security”
questions

48. know

49. are

50. have

58. yubico.com/gafw/
50%
off

59. turnon2fa.com

60. twofactorauth.org

61. dongleauth.info

76. chrome://flags

85. HTTP1991–2016

86. HTTP1991–2016

87. HTTPS

88. HSTS

89. hstspreload.
appspot.com

93. wordpress.org/
plugins/
two-factor/

94. wordpress.org/
plugins/
google-apps-login/

96. securityheaders.io

97. report-uri.io

98. cspisawesome.com

99. ssllabs.com/
ssltest/

100. observatory.
mozilla.org

105. Many graphics from The Noun Project
Computer by Azis; Credit card Gonzalo Bravo; Email by Bryn Taylor; Fingerprint by
Ben Davis; Lock with keyhole by Brennan Novak; Nokia 3310 by Stan Fisher;
Notification by vijay sekhar; Server by Yazmin Alanis; Shield by Wayne Thayer;
Spy by Alen Krummenacher; Tombstone by Jakob Wells; iPhone by Ross
Sokolovski.