diff --git a/about/index.html b/about/index.html index 5c981e9..0c44867 100644 --- a/about/index.html +++ b/about/index.html @@ -25,9 +25,9 @@
I use Linux-based operating systems. I have been doing so since 2021. As of 2023, I use Arch Linux as I love its lightweight and do-it-yourself nature. The AUR is also incredibly useful. For my text editor, I use Neovim because I love the plugins that can be used along with it.
-In terms of programming languages, I know Python really well but I am branching off to learning C and shell scripting due to the advantages of each one. C is much faster and teaches you more about how a computer thinks as compared to the easy-going nature of Python. I also use terminal applications which means that I use the terminal a lot. My preferred terminal emulator of choice is Alacritty. This means that a lot of the manual work that I do in the terminal can easily be automated using shell scripting.
+In terms of programming languages, I know Python really well but I am branching off to learning C and shell scripting due to the advantages of each one. C is much faster and teaches you more about how a computer thinks as compared to the easy-going nature of Python. I also use terminal applications which means that I use the terminal a lot. My preferred terminal emulator of choice is Alacritty. This means that a lot of the manual work that I do in the terminal can easily be automated using shell scripting.
-I use Librewolf with two profiles (more details here). One of the profiles is optimised for browsing only and has strong tracking protection and runs in permanent private browsing mode. The other profile is used for accounts and has less tracking protection to prevent site breakage when logging in.
+I use Librewolf with two profiles (more details here). One of the profiles is optimised for browsing only and has strong tracking protection and runs in permanent private browsing mode. The other profile is used for accounts and has less tracking protection to prevent site breakage when logging in.
Just like other people in my field, I tend to use my computer more than my phone. This is because work can be done much more easily on a computer than a mobile device. I use my phone to message close friends and family on XMPP, Session, Signal or WhatsApp (if required). I do not have any productivity apps on my phone except a calendar and a tasks app. I use CalDAV and CardDAV to sync my contacts, calendar and tasks to my phone through the DAVx5 application.
@@ -39,12 +39,12 @@If you would like to connect with me, please keep reading.
My preferred way of communication is email. However, it is incredibly insecure. Therefore, I request you to encrypt your emails with me.
+My preferred way of communication is email. However, it is incredibly insecure. Therefore, I request you to encrypt your emails with me.
My email is sufyaan@counterhawks.com [public key].
Fingerprint: 7CC9 2B65 FEC5 5C3F CC35 2891 6635 5EDD F4E5 B3EC
Please note that all emails (both encrypted & plaintext) from me will be signed with my public key.
I am not active on most social media platforms. Please read this post to find out why. Below are the only social media platforms I am on:
+I am not active on most social media platforms. Please read this post to find out why. Below are the only social media platforms I am on:
An authenticator app is much better than SMS-based 2FA. This is because authenticator apps usually follow the TOTP or HOTP standard, which is very secure. It basically uses a secret key along with the current time to create a unique code that changes every thirty seconds.
One thing that you should absolutely not do is use Google Authenticator, Microsoft Authenticator, Authy or anything as such. This is because the clients are close-sourced, which means that the code is not public. This means that they could be doing anything with your 2FA secret keys. Authy syncs your codes which is convenient but it does not allow you to export your keys, just like other properietary authentication apps. This is unethical as you should have complete control over what is required to access your own accounts. If your Authy account gets disabled, you will no longer be able to log in to most accounts. A much better alternative is:
You should also be taking frequent encrypted backups of not only your 2FA codes, but all data that is important to you. Read this post to learn how to take encrypted backups properly. Remember, you should keep your backups as far away from other people's hands as possible. If they have your secret keys, they have your 2FA codes.
+You should also be taking frequent encrypted backups of not only your 2FA codes, but all data that is important to you. Read this post to learn how to take encrypted backups properly. Remember, you should keep your backups as far away from other people's hands as possible. If they have your secret keys, they have your 2FA codes.
Security keys are the best form of two-factor authentication. They are physical keys which need to be plugged in to your computer or smartphone in order to be used. They use NFC, USB-C, USB-A and also the Lightning port. This 2FA method makes it so that it does not matter which person gets your credentials because they need access to your key physically in order to login. One drawback of this method is that, if you lose your key, you cannot login to your accounts. This is why people buy 2 or 3 as a backup. It should be noted that, although other methods can be used alongside security keys, it is not recommended as it is still possible to just use the other insecure methods for a cybercriminal and bypass your security key.
I recommend Yubico and NitroKey security keys.