Search found 936 matches

by damjam
Fri Sep 21, 2018 1:16 pm
Forum: Personal Consumer Issues
Topic: My Very First Smartphone [Samsung Galaxy S9+] — Please Critique This Plan
Replies: 123
Views: 6527

Re: My Very First Smartphone — Please Critique This Plan

Would it be possible for me to use my landline phone number for this phone? Yes. You can port a land line number over to a wireless carrier. It will take at least a few days to do it. Otherwise you can get a new number with little to no delay. Thanks! Would that involve abandoning my landline, or c...
by damjam
Fri Sep 21, 2018 12:59 pm
Forum: Personal Consumer Issues
Topic: My Very First Smartphone [Samsung Galaxy S9+] — Please Critique This Plan
Replies: 123
Views: 6527

Re: My Very First Smartphone — Please Critique This Plan

Would it be possible for me to use my landline phone number for this phone? Yes. You can port a land line number over to a wireless carrier. It will take at least a few days to do it. Otherwise you can get a new number with little to no delay. Thanks! Would that involve abandoning my landline, or c...
by damjam
Fri Sep 21, 2018 12:52 pm
Forum: Personal Consumer Issues
Topic: My Very First Smartphone [Samsung Galaxy S9+] — Please Critique This Plan
Replies: 123
Views: 6527

Re: My Very First Smartphone — Please Critique This Plan

iceport wrote:
Fri Sep 21, 2018 12:48 pm
Would it be possible for me to use my landline phone number for this phone?
Yes. You can port a land line number over to a wireless carrier. It will take at least a few days to do it. Otherwise you can get a new number with little to no delay.
by damjam
Fri Sep 21, 2018 11:12 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

Google has found security keys are a big improvement in security. Requiring employees to use security keys eliminated successful phishing attempts. I hope we can agree that phishing is a very real concern for just about everyone even if SIM swaps and number porting are not. As was pointed out earli...
by damjam
Fri Sep 21, 2018 10:48 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

No there is no way to disable the SMS at this time I believe we discussed this earlier. Use Google Voice. You will get your SMS via email. Yes. You can also have your verification code sent to a land line via voice rather than SMS. All these work around tactics that firms are requiring are exhausti...
by damjam
Fri Sep 21, 2018 7:01 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

No there is no way to disable the SMS at this time I believe we discussed this earlier. Use Google Voice. You will get your SMS via email. Yes. You can also have your verification code sent to a land line via voice rather than SMS. All these work around tactics that firms are requiring are exhausti...
by damjam
Fri Sep 21, 2018 6:47 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

Non-SMS 2FA is a reasonable practice, as long as you're maintaining your phone (or key) secure too.. otherwise non-SMS 2FA is just as useless once your phone is compromised. Security is like ogres. And ogres are like onions. Layers are important. Here is an excellent recent article "Before You Turn...
by damjam
Wed Sep 19, 2018 8:28 am
Forum: Investing - Theory, News & General
Topic: Vanguard - You'll need to sign up for security codes soon
Replies: 177
Views: 22588

Re: Vanguard - You'll need to sign up for security codes soon

My DH just got the email. The sign-up deadline is September 26. As noted earlier, there is no option for email. You gotta be kidding. :annoyed My contact phone number does not have text messaging (old landline) and I may not be near the phone when logging in. No, I'm not giving them another phone n...
by damjam
Tue Sep 18, 2018 8:04 pm
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

(Cue: entry stage right; someone who will explain how email is even worse... :) ) This is what Vanguard says: "Why can't you email security codes to me? We believe that text messages and phone calls provide greater security for our clients. Email providers can be compromised on a large scale, and e...
by damjam
Tue Sep 18, 2018 7:51 pm
Forum: Personal Finance (Not Investing)
Topic: Bank of America credit card “feature” (be careful with autopay)
Replies: 45
Views: 2737

Re: Bank of America credit card “feature” (be careful with autopay)

I am old school. Send me a bill and I'll use bill pay and schedule payments. I could see a benefit if you travel a lot or when your mental facilities decline. I think the key bill to pay is health insurance since I fear that could be a cause to cancel or be a source of confusion especially if a cov...
by damjam
Tue Sep 18, 2018 7:29 pm
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

I have read only about half of this thread, so I apologize if someone has already mentioned this. With regard to Vanguard's implementation of Yubikey as a second factor, I agree that the use of an SMS text message as a backup is a poor decision on their part. The National Institute of Standards and...
by damjam
Tue Sep 18, 2018 2:00 pm
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

Don't worry, I can make you feel worse about those institutions too. :D Example #1: Not too long ago there was an outage of the symantec TFA backend service. During that outage, which lasted many hours, Fidelity did not require TFA at all. U+P was enough. Example #2: Try out the Fidelity phone syst...
by damjam
Tue Sep 18, 2018 12:22 pm
Forum: Personal Finance (Not Investing)
Topic: [Credit freezes and un-freezes are now free]
Replies: 58
Views: 2463

Re: New York Times--NYTimes: Freezing Credit Will Now Be Free. Here’s Why You Should Go for It.

How easy is it to unfreeze it? I like to play the new credit card game to get bonus miles Unfreezing is simple. Probably too simple as GCD alluded to. When you freeze (which can often be done online, but not always) you receive a PIN for unfreezing. Obviously keep the PIN safe. When you need to unf...
by damjam
Tue Sep 18, 2018 10:58 am
Forum: Personal Finance (Not Investing)
Topic: Bank of America credit card “feature” (be careful with autopay)
Replies: 45
Views: 2737

Re: Bank of America credit card “feature” (be careful with autopay)

SpaethCo wrote:
Tue Sep 18, 2018 10:23 am
There are quite a few banks where the autopay system is disconnected from the credit card system, so it is unaware of other payments or credits. In addition to BoA, I've had that same situation with Capital One, US Bank / Elan, Barclays, plus a few credit unions.
That explains a lot. Thank you.
by damjam
Tue Sep 18, 2018 10:29 am
Forum: Personal Finance (Not Investing)
Topic: [AARP Article re: ID Theft & Dark Web]
Replies: 32
Views: 4004

Re: AARP Article re: ID Theft & Dark Web

All good info CaliJim.
You might want to check out this thread.viewtopic.php?f=2&t=259015&newpost=4124 ... ead#unread
by damjam
Tue Sep 18, 2018 9:50 am
Forum: Personal Finance (Not Investing)
Topic: Bank of America credit card “feature” (be careful with autopay)
Replies: 45
Views: 2737

Re: Bank of America credit card “feature” (be careful with autopay)

I am old school. Send me a bill and I'll use bill pay and schedule payments. I could see a benefit if you travel a lot or when your mental facilities decline. I think the key bill to pay is health insurance since I fear that could be a cause to cancel or be a source of confusion especially if a cov...
by damjam
Tue Sep 18, 2018 9:41 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

One of those conveniences being banking by phone. It's really quick and easy to do many things this way but the biggest for me is depositing checks. Check depositing via mobile is not necessarily a bad thing however. I would just ensure if using your mobile fancy thinking device for banking, you en...
by damjam
Tue Sep 18, 2018 9:27 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

AIG Fraud SafeGuard coverage add-on to homeowners insurance. https://halcyonuw.com/Home/Pdf?path=AigForms%5C&file=Fraud%20Brochure.pdf AIG has another product called Family CyberEdge https://www-200.aigprivateclient.com/index.php?Page=cyber-insurance-coverage https://preview.ibb.co/e80DKz/Screen_Sh...
by damjam
Tue Sep 18, 2018 9:23 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

One of those conveniences being banking by phone. It's really quick and easy to do many things this way but the biggest for me is depositing checks. Check depositing via mobile is not necessarily a bad thing however. I would just ensure if using your mobile fancy thinking device for banking, you en...
by damjam
Tue Sep 18, 2018 7:46 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

I assume that most of the password managers allow you to cut and paste the password. This seems like a good feature to prevent keyloggers from getting the password, but you also need to remember to delete the password from the cut-and-paste buffer. Password managers typically clear the clipboard au...
by damjam
Tue Sep 18, 2018 7:34 am
Forum: Personal Finance (Not Investing)
Topic: [Credit freezes and un-freezes are now free]
Replies: 58
Views: 2463

Re: New York Times--NYTimes: Freezing Credit Will Now Be Free. Here’s Why You Should Go for It.

How easy is it to unfreeze it? I like to play the new credit card game to get bonus miles Unfreezing is simple. Probably too simple as GCD alluded to. When you freeze (which can often be done online, but not always) you receive a PIN for unfreezing. Obviously keep the PIN safe. When you need to unf...
by damjam
Tue Sep 18, 2018 7:02 am
Forum: Personal Finance (Not Investing)
Topic: Bank of America credit card “feature” (be careful with autopay)
Replies: 45
Views: 2737

Re: Bank of America credit card “feature” (be careful with autopay)

Pen Fed does what the OP experienced as well.
I never pre pay that card now.
As an aside, I had a different issue with a BofA CC and cancelled it several years ago.
by damjam
Tue Sep 18, 2018 6:44 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

I'd argue the main realistic infosec risk end users face is phishing. I've parroted this response on several of the 2FA token threads, but complex passwords, OTP tokens or password managers won't protect you against common financial phishing attacks, specifically what is known as time of use phishi...
by damjam
Tue Sep 18, 2018 1:22 am
Forum: Personal Finance (Not Investing)
Topic: [AARP Article re: ID Theft & Dark Web]
Replies: 32
Views: 4004

Re: Dark Web Article

I do the first 2 above but use Google to keep most of my passwords, those of low security. I also keep an encrypted spreadsheet in case there are problems. The few which are critical are for financial sites (bank, investments, etc.) and each has a unique strong password and Google does not keep tho...
by damjam
Tue Sep 18, 2018 1:18 am
Forum: Local Chapters and Bogleheads Community
Topic: Jack Bogle Bobblehead
Replies: 24
Views: 2892

Re: Jack Bogle Bobblehead

I'd love one. Maybe even two.
My local chapter of Bogelheads could put it on the table when we meet in public areas so newcomers know they've reached their destination.
by damjam
Tue Sep 18, 2018 1:08 am
Forum: Personal Finance (Not Investing)
Topic: BofA - Am I Shadow-Loaning to Them?
Replies: 9
Views: 880

Re: BofA - Am I Shadow-Loaning to Them?

So we're all aware that once upon a time, savings deposits were used to fund loans that banks loaned out, i.e. pay 2% interest on the savings, loan it out at 4.5%, make money on the spread. (Or at least it used to be, it's probably something much more esoteric now) It's my understanding that retail...
by damjam
Mon Sep 17, 2018 11:55 am
Forum: Personal Finance (Not Investing)
Topic: [AARP Article re: ID Theft & Dark Web]
Replies: 32
Views: 4004

Re: Dark Web Article

So the relevant actionable part of the article is this: Actions recommended to protect yourself from identity theft 1. Freeze your credit 2. Monitor your financial accounts 3. Use a Password Manager I do the first 2 above but use Google to keep most of my passwords, those of low security. I also ke...
by damjam
Mon Sep 17, 2018 11:46 am
Forum: Personal Finance (Not Investing)
Topic: Need help in solving Tenant landlord issue
Replies: 26
Views: 2431

Re: Need help in solving Tenant landlord issue

I imagine it would help to know what state and possibly what county the apartment you vacated is in.
by damjam
Mon Sep 17, 2018 10:15 am
Forum: Personal Finance (Not Investing)
Topic: [Credit freezes and un-freezes are now free]
Replies: 58
Views: 2463

Re: New York Times--NYTimes: Freezing Credit Will Now Be Free. Here’s Why You Should Go for It.

Froze ours. Then because you have to do 3 separate freezes for each spouse that's 6 logins/passwords. We were car shopping recently and what a PITA to unfreeze Sorry to hear that you found the unfreezing process to be burdensome. Spouse and I froze last year after the Equifax debacle. I've had to u...
by damjam
Mon Sep 17, 2018 8:57 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

Although I greatly appreciate what all of you have contributed to this thread and other threads, I think you guys have given me a headache. I really wish someone could explain to me what is a reasonable course of action. I have a tech person who is willing to help me (a former UNIX administrator), ...
by damjam
Mon Sep 17, 2018 8:48 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

Although I greatly appreciate what all of you have contributed to this thread and other threads, I think you guys have given me a headache. I really wish someone could explain to me what is a reasonable course of action. I have a tech person who is willing to help me (a former UNIX administrator), ...
by damjam
Mon Sep 17, 2018 4:05 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

Although I greatly appreciate what all of you have contributed to this thread and other threads, I think you guys have given me a headache. I really wish someone could explain to me what is a reasonable course of action. I have a tech person who is willing to help me (a former UNIX administrator), b...
by damjam
Sun Sep 16, 2018 3:28 pm
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

The threat model of the OS is not such that encrypting your credentials locally moves the needle anyway. iOS is probably the only exception as the sandboxing track record, while imperfect, it awfully good over the last 10 years. That said, on some level this is all a fools errand. If a bad guy gets...
by damjam
Sun Sep 16, 2018 3:07 pm
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

For Vanguard and other brokerage and mutual fund companies there is no federal regulation if you are hacked. Some firms offer a policy. Here is Vanguard policy about your responsibilities: https://personal.vanguard.com/us/help/SecurityOnlineFraudPledgeContent.jsp I found this requirement from Vangu...
by damjam
Sun Sep 16, 2018 1:56 pm
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

For GMail you would use Authenticator app for 2FA. Nothing gets sent anywhere. Google Mail can also be secured with a Yubikey. I have Yubikey as primary 2FA on my Gmail with Authenticator as secondary. Enable Google's advanced account protection evestor, thank you. This is exactly what I've been lo...
by damjam
Sun Sep 16, 2018 11:33 am
Forum: Personal Consumer Issues
Topic: Using Lastpass as your password manager
Replies: 34
Views: 3734

Re: Using Lastpass as your password manager

I would love it if a password manager worked with Yubikey and would jump on it in a heartbeat. Until then... Shakespeare: “Striving to better, oft we mar what's well.” There is such a password manager and I use it every day (as I mentioned above, sorry to repeat myself). It’s called password-store ...
by damjam
Sun Sep 16, 2018 11:21 am
Forum: Personal Finance (Not Investing)
Topic: [AARP Article re: ID Theft & Dark Web]
Replies: 32
Views: 4004

Re: Dark Web Article

3. Use a Password Manager Browser autofill integration was once thought to be primarily a convenience feature, but these days it's actually a really important security feature. Your password manager should be doing 2 things for you: Ensuring a unique password for every site Ensuring your user/passw...
by damjam
Sun Sep 16, 2018 11:11 am
Forum: Personal Consumer Issues
Topic: Using Lastpass as your password manager
Replies: 34
Views: 3734

Re: Using Lastpass as your password manager

Why? Because they are among the easiest and fastest ways ever to lose all your passwords. :) I would not ever advise using this service or any service like it. Sorry to be a wet blanket. ...but of course good password mgmt is not enough either. Strong MFA configs is a requirement. That said, handin...
by damjam
Sun Sep 16, 2018 9:42 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

For GMail you would use Authenticator app for 2FA. Nothing gets sent anywhere. Google Mail can also be secured with a Yubikey. I have Yubikey as primary 2FA on my Gmail with Authenticator as secondary. Enable Google's advanced account protection evestor, thank you. This is exactly what I've been lo...
by damjam
Sun Sep 16, 2018 9:30 am
Forum: Personal Consumer Issues
Topic: Using Lastpass as your password manager
Replies: 34
Views: 3734

Re: Using Lastpass as your password manager

Those of us in the business don't call it LastPass. We call it LostPass. Why? Because they are among the easiest and fastest ways ever to lose all your passwords. :) I would not ever advise using this service or any service like it. Sorry to be a wet blanket. ...but of course good password mgmt is ...
by damjam
Sun Sep 16, 2018 9:22 am
Forum: Personal Consumer Issues
Topic: Using Lastpass as your password manager
Replies: 34
Views: 3734

Re: Using Lastpass as your password manager

evestor wrote:
Sun Sep 16, 2018 9:20 am
Those of us in the business don't call it LastPass. We call it LostPass.
Why?
by damjam
Sun Sep 16, 2018 9:13 am
Forum: Investing - Help with Personal Investments
Topic: Personal investment plans
Replies: 13
Views: 976

Re: Personal investment plans

Dear all, I am brand new on here so please forgive me if my question is amateur or even stupid to some of you. I am a huge fan of Jack Bogles books which I have to admit I stumbled across by chance after reading one of Tony Robbins books on wealth. My question is can anyone advise me on a tool / re...
by damjam
Sun Sep 16, 2018 8:39 am
Forum: Personal Finance (Not Investing)
Topic: [AARP Article re: ID Theft & Dark Web]
Replies: 32
Views: 4004

Re: Dark Web Article

I still have trouble accepting that number 3 is the best way to go. Makes me nervous to have all of my passwords "out there" - and in one place, even if in encrypted form. I am open to being convinced, though. I use 1Password's licensed version. I have it set up to stay entirely on my own computers...
by damjam
Sun Sep 16, 2018 8:24 am
Forum: Personal Finance (Not Investing)
Topic: [AARP Article re: ID Theft & Dark Web]
Replies: 32
Views: 4004

Re: Dark Web Article

I still have trouble accepting that number 3 is the best way to go. Makes me nervous to have all of my passwords "out there" - and in one place, even if in encrypted form. I am open to being convinced, though. :wink: Well you could go with KeePass. It allows passwords to be stored, in an encrypted ...
by damjam
Sat Sep 15, 2018 9:00 pm
Forum: Personal Consumer Issues
Topic: Using Lastpass as your password manager
Replies: 34
Views: 3734

Re: Using Lastpass as your password manager

Hackers tend to go for the low hanging fruit. Those who use password managers are definitely not the low hanging fruit. Those who use "password" as their password are. No doubt. From a 2017 Pew Research article: Still, just 12% of internet users say that they ever use password management software t...
by damjam
Sat Sep 15, 2018 8:44 pm
Forum: Personal Finance (Not Investing)
Topic: [AARP Article re: ID Theft & Dark Web]
Replies: 32
Views: 4004

Re: Dark Web Article

So the relevant actionable part of the article is this: Actions recommended to protect yourself from identity theft 1. Freeze your credit 2. Monitor your financial accounts 3. Use a Password Manager I hope the lack of comments just means everyone is already doing these things so it's not really news...
by damjam
Sat Sep 15, 2018 10:56 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

For GMail you would use Authenticator app for 2FA. Nothing gets sent anywhere. Google Mail can also be secured with a Yubikey. I have Yubikey as primary 2FA on my Gmail with Authenticator as secondary. I don't like a physical second factor. I know it is more secure in theory, but in practice it is ...
by damjam
Sat Sep 15, 2018 9:42 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

Is a google voice number safer than sms to your phone? Maybe, maybe not. The thing about hijacking your cell phone number is that it’s hard to do on a mass scale so it’s less attractive to thieves from a purely cost/benefit analysis. If you’re a famous journalist, spy or politician yes, I’d be very...
by damjam
Sat Sep 15, 2018 7:27 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

For Vanguard and other brokerage and mutual fund companies there is no federal regulation if you are hacked. Some firms offer a policy. Here is Vanguard policy about your responsibilities: https://personal.vanguard.com/us/help/SecurityOnlineFraudPledgeContent.jsp I found this requirement from Vangu...
by damjam
Sat Sep 15, 2018 6:49 am
Forum: Investing - Help with Personal Investments
Topic: How real is cyber risk?
Replies: 176
Views: 10021

Re: How real is cyber risk?

I think Vanguard would be responsible for that. I said "if you are hacked" and I meant you not Vanguard. I don't think that is the most likely scenario. All the cases I know of involved hacks of individual investors or seemed to involve hacks of individual investors. Never heard of a hack of a brok...