Avatar

Untitled on Purpose

@gardenwolfc

What does that mean? I dont know. She/Her 20 something human being on planet earth. Probably. I mostly reblog stuff, but I'll occasionally make posts and even more occasionally make art at my sideblog edit link later I'm on mobile fuck off its hard.

Have you been using the same email address and username on various platforms for twenty years?

Have you been using the same password for your accounts for twenty years?

If so, please do the following:

  1. Go to HaveIBeenPwned.Com. In the search box, search your email address.

If the bottom of the page turns red, it means that your email is in at least one set of data from a breach.

2. Scroll down on the page to look at the breaches your email was in. I want you to look specifically for breaches that include passwords.

What this means is that your email address, which you have used as an account name for twenty years, and your password, which you have used across platforms for twenty years, are available for anyone on the web who wants to look. It’s pretty easy to go and find too!

This is how a LOT of identity theft and fraud happens these days.

Let’s say you created your LiveJournal account when you were fifteen. You used it a lot and by the time you were twenty the credentials you created for it were familiar and you plugged them in whenever you had to create an account. You plugged them in when you created a Facebook account. You plugged them in when you created a bank account. You plugged them in when you created the account that lets you see your lab results from your doctor’s office.

All that someone has to do to seriously fuck your life is to do the following:

  • Find your email and password in one of these lists.
  • Compare to other lists and see if the same information is present
  • Seek out the most common account types (gmail, facebook, yahoo, hotmail, icloud, amazon, and one of about five financial institutions)
  • Start entering your username and password
  • Literally, profit.

That’s all it takes. If you used the same username and password in two accounts in a breach, you probably used it elsewhere. Maybe you put an exclamation after the password, or entered your birth year, but those are pretty easy things to guess about and well worth it if someone can send themselves all the cash in your bank or order a shitload of giftcards from your amazon account.

And look: I know it ’s really easy to not take warnings about passwords seriously. I know that if you haven’t been screwed by this yet that it’s easy to think that your password is strong enough, that you’re going to get overlooked because you’ve got less than a hundred dollars to your name, that you’re not going to have a problem with this.

People re-use passwords all the time. They re-use passwords constantly. And a lot of people don’t understand that those passwords are freely available out on the internet.

Think about what would happen if someone locked you out of your primary email account and there was no way to get back in. You go to change your password on social media and what does it do? Sends a confirmation to your email, which you now don’t control. Is your primary email one of the ways that you get information from your bank? Is it how you log into and track orders from online resellers? How do you log in to the profile on your phone? Do you have a browser profile? Do you log in with your email address? Does your browser profile save your credit card numbers?

This is why we use password managers. This is the advantage to password managers. With a password manager there is ONE password you have to be very careful to keep safe (the password to your password manager) and all the other passwords are disposable. Did your email get revealed in the Tumblr breach? NBD, use your password manager to generate a new, unique password for your tumblr account, change it, and you’re good to go.

I know it seems like a giant pain in the ass to start using a password manager. I know it seems like a much bigger headache to log into a password manager and copy passwords than it is to type in the password that you KNOW. But I promise that using a password manager is a much smaller headache than freezing your credit so that people stop applying for credit cards in your name, or trying to start a brand new email from scratch when you get locked out of your old one, or tracking down all of the photos that someone could download from your cloud storage and making sure that they aren’t getting posted on revenge porn sites.

Bitwarden is a secure, open-source password manager that has a free option for individual users. It has apps available for iOS and Android, and extensions for Firefox (which is also supported in Firefox Mobile) and Chrome. It has an extremely comprehensive tutorial series to help you learn how to use it. If you’re thinking about signing up for a password manager but you’re not sure, I strongly recommend checking out some of those videos.

I also promise that using a password manager gets easier the more you use it. It’s a big hurdle to jump over when you’re getting started, but it gets easier pretty much immediately.

And this doesn’t have to be an all-or-nothing proposition. You can create an account with a password manager and just save one login to start. It’s actually easiest if you keep it low-key and just update your logins whenever you find yourself needing to log in to a site instead of trying to go through and do it all at once before you’re familiar with the program.

I’d recommend starting with at least two things: your primary email and your primary bank account. After that update any major online retailers you shop frequently and any social media that you use often.

A password manager is also a great place to store account recovery codes, answers to security questions, previous passwords, PINs, and secondary contact methods.

A lot of people worry that a password manager is an even bigger risk than just reusing passwords or creating memorable passwords or writing passwords down in a notebook because if a password manager is breached then all of that very important data is exposed. This is a reasonable thing to fear, and that’s why it’s important to be careful about what password manager you use.

This is why I recommend Bitwarden. Bitwarden uses a very secure encryption scheme and never stores any of your data in plaintext. If Bitwarden is breached and leaks data, all that will be leaked is gibberish. What you need to worry about to keep your password manager secure are the following:

  • Create a good, complicated, unique password for your password manager. This password DOES need to be memorable, so pick something that will be easy for you to remember. I like to use song lyrics and the year a song was released for this, so something like “Nggyu,Nglyd,Ngraady82” if we’re using “Never Gonna Give You Up” as an example.
  • Make sure that you have secure recovery methods for your password manager; save your recovery passphrase in a safe place (I have a notebook with info like this and software activation codes and so on that I keep in my sock drawer, as well as a password protected folder on my desktop)
  • Only log in to your password manager from devices that you use a pin or password to log into - if you aren’t doing that, at least make sure to set a short vault timeout, so that your password manager will log out after a set (short) period of time
  • Do not use the password for your password manager anywhere else
  • Do not tell anyone the password for your password manager
  • Make sure that your devices have good security and don’t allow people remote access to your computer or devices.

Basically YOU are the only way that someone can get into your password manager. Your password is the only thing that can unlock it, which means that A) you have to ensure that you won’t lose the password and B) you have to ensure that nobody else has access to the password. I know that first one sounds scary, but there are a LOT of ways to recover a Bitwarden account if you take the time to set them up. The second one is much simpler, and is the thing that is going to keep your password manager safe.

Anyway ILU please use a password manager.

This is actually a great question. You *SHOULD* be suspicious when presented with websites that ask you to enter your email or when given advice from randos on the internet.

One of the easiest things to do when you see a novel piece of information and you want a general background on it is to check wikipedia.

The wikipedia page does a pretty good job of explaining what it *does* and does suggest that a lot of people use it, but that’s not really enough info to know whether to trust something. So it is perfectly reasonable to do a search of your actual question: “Is haveibeenpwned safe?”

This is somewhat complicated, because various search engines are going to return various answers and it’s not like any of those answers are definitive either.

So, you know that “is haveibeenpwned safe” is a computer security question, so it’s worthwhile to see what security and computer focused people say about it. The Register, PCMag, ZDNet, and HowToGeek are all computer-focused resources; you can search “haveibeenpwned” on those sites and see what they say.

But you might not trust those sites either. You may want to ask a group of internet-savvy users users. It’s kind of a joke that you need to add “reddit” to the end of a query to get a good answer these days, but sometimes that’s an effective way of getting an answer!

You can also take into consideration the history of the site: It has been around for about 10 years now, and if it were dangerous or risky to use there would be a lot of articles out about it. But when you search “is haveibeenpwned dangerous?” pretty much every site agrees that it’s safe.

Information literacy has a lot in common across a lot of different fields, and one of the things that is true across the board is that you need to be able to identify good sources of information before you can feel secure discussing a topic. It is a VERY GOOD idea to question random tech advice that you stumble across on tumblr dot com because tumblr is not generally known as a good source of tech knowledge.

To the folks reccing other password managers in the notes: No. You are wrong. (mostly kidding, use what you want)

But no seriously the reason that I specifically described Bitwarden and linked to it and recommended their tutorials is because of the following reasons:

  1. Extremely functional free tier version
  2. Very usable and approachable for people who are not tech savvy compared to some other options
  3. YOU CAN INSTALL IT ON AS MANY DEVICES AS YOU WANT

I’m kind of of the opinion that a password manager which you can only install on one device is useless. What if you need your password and you’re not at that device? What if your device falls into the ocean? What if you are sharing a vault with an elderly parent? No. Bad. Endless devices. Forever Devices. Logging In Through The Browser On Any Computer You See (don’t actually do that but there is a browser version and it kicks ass because *sometimes you have to use someone else’s device*). See A Smart Toaster, Install Bitwarden On It. Devices For Days.

There’s a serious reason for this - if someone frequently has to log in from a device that doesn’t have their manager installed, or if they frequently have to type complicated, pain-in-the-ass passwords from their computer to their phone or their phone to their computer then that person is either going to A) use their password manager less for accounts they use frequently or B) use less complicated passwords and both of those sort of defeat the purpose of using a password manager. So actually, there’s my pitch:

Bitwarden - It’s free and you can install it on whatever you want.

Avatar

it feels strange to me now that undertale garnered such a reputation for being edgy due to fan interpretations when the game itself is just SO earnest and sentimental that it hurts. like, it’s a game about connection and friendship and love and it’s so forward with that message that it gets silly with it, but that’s just because it really really wants you to care. it’s the least cynical game i’ve ever seen, even on it’s worst routes

you guys are SO right

Avatar

Speedrunners have ruined their entire speedruns of Undertale last second because they chose to hug Asriel at the end. The game is so impactful that even speedrunners, understandably disregarding everything about the game except for what they need to memorize in order to get the fastest time for their sport, have seen Asriel and couldn’t help but let him know in his last moments that they forgive him.

Valve really went "Alright so here's an incredible game that'll change gaming history forever. Here's a sequel to that game that'll be even more incredible and iconic that people will love and play for years to come. And if you want a third one well brother you can just die"

valve carefully constructing a game series with an intriguing plot that is told in a perfect balance between gameplay and environmental storytelling, with charming characters and a good sense of humor that will shake the entire gaming industry only to not fucking finish it

Avatar

Bocchi 🏳️‍🌈?

Avatar

A few people were talking about checking the original translation, so I went and had a look.

The cosplay girlfriend part is spot on, with the Japanese "コスプレイヤー彼女” translating to it directly.

The only slight difference is "広告塔" which literally means something along the lines of "billboard" or "face of a company/group." Getting a sponsorship is still a good translation though.

I just love that the most firm conformation of Bocchi being queer is her playing splatoon and wishing for a cosplayer gf while sitting like a goblin

if you ever doubt your writing, be it your themes, or the reason behind it, remember that h.g wells wrote war of the worlds both as a commentary on colonialism and the horrors it brings, and because he fucking hated his neighbours and his 13 hour job, and wanted to write about the town in which he lived getting blasted to the fucking ground by lasers into an irreparable heap and all of the townspeople dying painfully 

you, too, can channel your hatred for that guy that lives down the hall and blasts music at 4am into the one of the most influential science fiction stories ever written! fuck it! i believe in you!!  

This is one of the most inspirational things I’ve ever seen

Been looking for this