The Privacy Iceberg

This is original content. AI was not used anywhere except for the bottom right image, simply because I could not find one similar enough to what I needed. This took around 6 hours to make.

Transcription (for the visually impaired)

(I tried my best)

The background is an iceberg with 6 levels, denoting 6 different levels of privacy.

The tip of the iceberg is titled “The Brainwashed” with a quote beside it that says “I have nothing to hide”. The logos depicted in this section are:

The surface section of the iceberg is titled “As seen on TV” with a quote beside it that says “This video is sponsored by…”. The logos depicted in this section are:

An underwater section of the iceberg is titled “The Beginner” with a quote beside it that says “I don’t like hackers and spying”. The logos depicted in this section are:

A lower section of the iceberg is titled “The Privacy Enthusiast” with a quote beside it that says “I have nothing I want to show”. The logos depicted in this section are:

An even lower section of the iceberg is titled “The Privacy Activist” with a quote beside it that says “Privacy is a human right”. The logos depicted in this section are:

The lowest portion of the iceberg is titled “The Ghost”. There is a quote beside it that has been intentionally redacted. The images depicted in this section are:

  • A cancel sign over a mobile phone, symbolizing “no electronics”
  • An illustration of a log cabin, symbolizing “living in a log cabin in the woods”
  • A picture of gold bars, symbolizing “paying only in gold”
  • A picture of a death certificate, symbolizing “faking your own death”
  • An AI generated picture of a person wearing a black hoodie, a baseball cap, a face mask, and reflective sunglasses, symbolizing “hiding ones identity in public”

End of transcription.

  • PraiseTheSoup@lemm.ee
    0·
    2 days ago

    I use Keepass but mostly for convenience and I don’t understand why it’s in the 5th category. If I have 50 different accounts with 50 different passwords but they can all be had with one keepass password, how is that different than having 50 different accounts all using the same password?

    • Bazoogle@lemmy.world
      0·
      2 days ago
      1. A password managed is basically like a physical vault. If someone gets into a physical vault, they’ve gained access to all your valuable items, but the vault is extremely difficult to get into.
      2. Random websites do not prioritize security like they should. So when there is inevitably a breach in one of those 50 sites and you end up on haveibeenpwned.com, that does not allow them access to the other 49 sites. Often when logins are breached, the people getting that information do not care about the actual site that was breached. Rather, they know a password you use and your email, and can now try to login to actually useful sites where people often use the same login.
      3. There should be multiple layers of security to your password manager. Password and Authenticator app should be basic (No SMS or Email 2FA, not secure enough). Ideally, we move towards passwordless logins altogether so there is no secret that can be compromised on the server side.
    • Dessalines@lemmy.ml
      0·
      2 days ago
      1. With a long enough passphrase, your keepass db is uncrackable by any current tech.
      2. If you have 50 accounts using the same password, if any one of those websites get hacked, they now have access to every other account.
    • TORFdot0@lemmy.worldEnglish
      0·
      2 days ago

      If you don’t use a second factor to unlock your password database then you are correct.

      Here is the real secret. If the only authentication you have on an account is password auth then you really have no authentication at all. Passwords are not security

    • IttihadChe@lemmy.mlEnglish
      0·
      2 days ago

      ~ how is that different than having 50 different accounts all using the same password?

      Because the password manager would have to be hacked itself.

      If you just use the same password for everything, any of those 50 sites could be hacked.

    • refutablewife@reddthat.com
      0·
      2 days ago

      If you use an easy password for your password manager, it’s trivial to crack with a few word lists and hashcat, just as any other account.

      Websites get hacked all the time, and your login details (and PII) ARE available for sale from shady people right now. It’s important that, the next time one of the sites you use gets hacked, you don’t have to scramble to update all your other logins.

      • wolfinthewoods@lemmy.mlEnglish
        0·
        2 days ago

        I myself use a password manager protected by a pin, and the password itself is ridiculously complex. Not everyone will do that, but that seems to be the best solution for using a password manager. Hell, even though it’s a complicated password I’ve ended up memorizing it (I don’t know if that’s a good thing or not lol).