@briankrebs "one bad click"
2) "years ago he used Google Photos to store an image of the secret seed phrase that was protecting his cryptocurrency wallet"
3) "Google Authenticator by default also makes the same codes available in one’s Google account online"
next person:
4) "I put my seed phrase into a phishing site"
This is not a post about people being dumb, on the contrary. It's too easy to put trust into the wrong apps/web sites - and that's where the real issue lies.
The lesson should be: Your data is not safe in the cloud. Stop putting pictures, codes and security backups there.
https://ioc.exchange/@troed/113674094469133300
@troed Yeah. There certainly are a lot of cases where we as security people say, oh, that's silly, or they should have known better. And it's true that Google never called anyone, and they […]
────
────