Keeping safe beyond sign-in

As The Register reports today, Microsoft briefly exposed a plethora of passwords and other secrets due to a bulk upload of data to GitHub recently.

The data was a set of AI training data - data used to teach AI models how to understand the world around them.

It makes no sense having the best locks on your front door if you leave the back door open... so what can we learn from this episode?

Protecting passwords and other sensitive information from exposure to the wider world is essential for maintaining your online security. Here are some measures you can take:

Use Strong, Unique Passwords:

Create strong, complex passwords that are difficult to guess.

Use a combination of uppercase and lowercase letters, numbers, and special characters.

Avoid common dictionary words or phrases.

Ensure your passwords are at least 12-16 characters long.

Use a passphrase, which is a sequence of random words or a sentence that's easy to remember but hard to crack.

Use a Password Manager:

A password manager can generate and store complex, unique passwords for each of your accounts.

It encrypts your passwords and provides a secure way to access them.  It is a much better alternative for password storage than text or a spreadsheet. 

Enable Two-Factor Authentication (2FA):

Whenever possible, enable 2FA for your online accounts.

This adds an extra layer of security by requiring you to enter a one-time code from a mobile app or text message in addition to your password.

Be Cautious with Emails:

Avoid clicking on links or downloading attachments from suspicious emails.

Be cautious of phishing attempts that trick you into revealing your credentials.

Use Secure Connections (HTTPS):

Ensure that websites you access use HTTPS, especially when entering sensitive information.

Look for the padlock icon in your browser's address bar.

Avoid Public Wi-Fi for Sensitive Transactions:

Public Wi-Fi networks can be less secure. Avoid conducting sensitive transactions when connected to public Wi-Fi, or use a VPN for added security.

Regularly Update Software:

Keep your operating system, web browsers, and software up to date to patch known vulnerabilities.

Employ Device Locks:

Use PINs, patterns, or biometric locks on your devices (smartphones, tablets, laptops) to prevent unauthorized access.

Protect Physical Documents:

If you write down passwords or other sensitive information, keep them in a secure place, like a locked drawer or a safe.

Educate Yourself:

Stay informed about common security threats and best practices for online safety.

Train yourself and your family on recognizing phishing attempts and other scams.

Secure Your Email Account:

Your email account often serves as a gateway to other accounts. Use a strong password, enable 2FA, and be cautious about the emails you open and respond to.

Limit Sharing of Secrets:

Only share passwords and sensitive information with trusted individuals when absolutely necessary.  Never put passwords or other secrets in code.  Use managed identities.

Regularly Review and Update:

Periodically review your online accounts, revoke access to apps or services you no longer use, and update passwords as needed.