Extreme Security Myths Debunked (w/ Henry from Techlore)

[@AllThingsSecured]

Thanks for joining the live stream! If you enjoyed this conversation with Henry, please give this video a thumbs up. And here's the link to get $5 off your next two YubiKeys: yubi.co/all-things-secured-2024

[@S10394]

@allthingssecured Can You Do one with Naomi brockwell please

[@anbloco]

Henry & Josh, my favorite tech & security research guys. Glad you two did a video together. Josh, I agree that trying to get other people to start using something different is difficult. This has been the challenge for me.

[@AllThingsSecured]

Glad you enjoyed it!

[@CanesFan65]

LOVE my Yubikeys. One problem I found with using Security Keys is that it seems that you cannot turn off all other 2FA Options. Many websites I use will "allow" trying a different 2FA Option (if you don't have your security key) which kind of defeats the whole purpose of a Security Key. I don't want SMS/Text, Phone, etc. I have many backup Yubikeys so I always have a security key available,

[@henry-fisher]

Agreed! I get super annoyed when services still require other 2FA methods. Proton & GitHub come to mind for me :)

[@AllThingsSecured]

Yea, I've found that for some (not all) of these accounts, once you set up both a 2FA key AND a backup key, they don't require a less secure backup like SMS or an authenticator code.

[@sylviastagg-giuliano6229]

Great conversation, thank you! Which of the Yubikeys do you use?

[@AllThingsSecured]

I have the 5 Series so that I can use it both as a FIDO2 key as well as for TOTP authenticator codes.

[@LeonCouch]

Your comments and frustrations about varying levels of skill, motivation, need, and interest in commentary and among family. It seems that this could ne simply addressed by issung a summary YT

[@anbloco]

I missed the live?! Ugh I have been using Libre office and I like the openpgp option for document encryption ❤

[@AllThingsSecured]

Very cool. Thanks for sharing.

[@prpl1234]

I bought Google's Titan Security Key. Did I make a big mistake? Will using this key give Google more information about me than they already have? (I have 3 google email accounts and use KZbin. I don't post on KZbin, but I sometimes make comments on other people's posts.) Thank you! P.S. I signed up for a Proton account based on Josh's advice, but have not had a chance to migrate my email to Proton. I also have had a Startmail account for a long time, but only use it for very sensitive info. BTW Josh, it was through Startmail that I found out about you.

[@Observational_D-Block]

I’ve been a subscriber of you both for years

[@rodivilin]

Same

[@henry-fisher]

[@AllThingsSecured]

Awesome! Thanks so much.

[@imba69420]

Not worth watching.

[@AllThingsSecured]

But hey, thanks for commenting anyway.

[@harryviking6347]

LOL! They are digging a whole so as to get away from all the mess they have created! But sorry! There isn't a hole big enough for that guys!

[@AllThingsSecured]

Umm...ok 😂

[@robtihanyi1155]

Really enjoyed this livestream Josh...keep up the good work man.

[@AllThingsSecured]

Thanks so much for your constant support, Rob!

[@kedMam-k4o]

The tool "router" as a root cause to kill me?

[@SnappleRyRy89]

Nice! Didnt think I’d see 2 of my subbed channels in this video. I know it’s a long shot but I’d love to see interviews with Mutahar AKA Someordinarygamers, Mental Outlaw, or even Louis Rossmann

[@AllThingsSecured]

Thanks so much for watching and commenting!

[@BarrettBooth]

Great video!

[@AllThingsSecured]

Thanks, Barrett!

[@anbloco]

cloaked works pretty good for voip numbers

[@henry-fisher]

Looking into them soon!

[@AllThingsSecured]

Yea, I've used them a bit. It's a different way to use VoIP, for sure.

[@anbloco]

​@henry-fisher I have found limitations, but for most of my activity, it works well

[@bosa1345]

Should I use 2 yubikeys and totp as a backup or does that downgrade the security?

[@AllThingsSecured]

You're only as strong as your weakest mode of security. If you're going to use 2FA keys, the key should be your backup (on top of *maybe* backup codes)

[@bosa1345]

@@AllThingsSecured Thank you!

[@anbloco]

Henry likes Judge Judy, lol. She is pretty awesome :)

[@henry-fisher]

JJLC!

[@AllThingsSecured]

Haha 😂

[@brianthevet4577]

Enjoy you both independently and together!!

[@AllThingsSecured]

Thanks!!

[@Kenleaty]

How many keys do you own?

[@AllThingsSecured]

Me? Because of the work I do, I have north of 15 keys, but I don't use all of them. I just have them for testing and visual purposes.

[@S10394]

Thanks Love from Malta❤ Gorg

[@AllThingsSecured]

Thanks, Gorg!!

[@joshhabka]

First :3

[@Nutsackfart]

I was actually first waiting for a guy seeking attention to say first

[@AllThingsSecured]

Nice, Josh. Glad to see you join the live stream again. Have a great week!

[@summerbreeze5115]

Please give time stamps

[@AllThingsSecured]

It's coming...it takes time :)

[@beretta804]

Hello from RI USA

[@AllThingsSecured]

Nice! Thanks for joining :)

[@darealjohnsmith]

Ignore Techlore's security advice. Dude loves to push honeypots.

[@AllThingsSecured]

Glad to know we have a REAL expert in the house! Thank you for gracing us with your presence 😂

[@darealjohnsmith]

@@AllThingsSecured lol I didn't claim to be an expert, I'm just saying not to blindly trust every word the guy says. I swear he's either not an expert, or he IS one...maliciously recommending "privacy services" that don't respect privacy.

[@darealjohnsmith]

@@AllThingsSecured Frankly, I do appreciate some of his videos. I do learn about some software for the first time from his channel...but I refuse to believe he's a genuine expert with our best interests at heart.