Category
Security
Phishing, passwords, PGP, and operational security.
How do I spot an Awazon phishing clone?The tells are an address that is close but wrong and a login that asks for your recovery phrase. The captcha check beats them.How should I store my password and recovery phrase?The password in an encrypted local manager, the recovery phrase on paper. Neither in the cloud.How do I verify a PGP-signed mirror list?Import the market key once, run gpg verify on the signed list, and look for the good-signature line.What operational-security basics should I follow?Fresh username, unique password, phrase on paper, short sessions, small balances.