Infosec tip #2: randomize your usernames of all accounts unless you have a reason not to.

There's no reason people should be able to guess the username to your health care provider just because they know your username on some social media platform.

If there's an authentication bypass vulnerability that goes public in the future, you'll be glad you took this step.

nostr:nevent1qqsw69g4nclzrnmet4z0vwtcwc8zm28awpepsa62lxtw0upc3j0897gpz3mhxue69uhhyetvv9ujumn0wd68ytnzvupzqn4csvgddd8djhrdv63etv7nea2ehp06aj8hdyw6l4q94yhq2htdqvzqqqqqqyqdgcc4

Reply to this note

Please Login to reply.

Discussion

https://simplelogin.io/ good?

better options?

I have not used it personally, but I've heard good things. AnonAddy is a similar service.

Here's a good post comparing the two: https://blog.thenewoil.org/2023-review-anonaddy-and-simplelogin

Also, TheNewOil is an outstamding resource. It's aimed at people who are not already experts on the topic, but it also has things that help people lile me find answers to "how do I get around service providers wanting my phone number?" which I think of as "are there VoIP providers that work with big tech companies like Yahoo and Azure?"