10.72 Security

System and software updates

• Keep your operating system and software up-to-date
• Run antivirus software
• Turn on disk encryption
• Document your setup
• Lock the screen when you leave the room

Backups

• Regular backups, at least weekly
• Backup on external device(s)
• Software: Back-in-time (Linux) or Kopia
• Share Git repositories on GitHub and with the team (publishing and distributing data across multiple devices is a useful measure against ransomware attacks)

Passwords

• Use strong passwords
• Use different passwords for different accounts
• Use a password manager (such as KeePass)

Confidential data and communication

• Do not post personal data online without consent
• Store sensitive data (such as grades) in directories with restricted access rights
• Prefer end-to-end encrypted channels
• Sign your E-Mails
• Be aware of phishing and social engineering attacks

Authentication and access

• Use 2-Factor Authentication whenever possible
• Give access to confidential data only when needed and revoke it when it is no longer required

Travel

• Do not leave your equipment out of sight
• Do not log into your online accounts on other devices
• Do not use public WiFi hotspots or charging stations
• Turn off your computer and phone completely when traveling across borders and checkpoints
• Use VPN and communicate through encrypted channels
• Do not work on confidential data when others can see your screen

Resources

• Digital Self Defense
• Ratgeber, Digitale Gesellschaft