NOTE 2 SELF: #CyberSecurity list 2 remember!!! 🚨🚨🚨🤖🤘 #blackoctober #aisecurity #vibecoding
JJ Englert@JJEnglert
I just shared this with my family, and you all should do it too. You’ve probably noticed it feels like everything is getting hacked right now. At this point, you should assume everything about you is exposed in one way or another. Your socials, your medical history, your old passwords, your phone number. I ran through this checklist last week, and I’d do it as soon as you can. Like today. These are the 5 steps I took, plus prompts that get your AI to do most of the work for you. 1. Freeze your credit at all three bureaus. If you only do one thing on this list, do this one. It’s free. It takes about 10 minutes per bureau. It stops anyone from opening a new card or loan in your name. You can unfreeze it any time you need to apply for something. Equifax: https://t.co/pl6xcLfiL1 Experian: https://t.co/UuBOD2z0vA TransUnion: https://t.co/5Nwo4DQyR4 2. Put limits on your credit cards. Log into each card and set a spending limit wherever the app lets you. Start with the cards you never use. If a card has no limit option, turn on the lock toggle until you need it. My advice is to set every limit a little above what you actually spend in a month. You can always raise it later. 3. Kill old API keys and cap your spend. Go into every AI provider you use: Anthropic, OpenAI, Cursor, Gemini, OpenRouter, wherever you’ve made a key. Delete every key you aren’t actively using. Then set a spend limit at the org level. When I checked mine, my one-person account had a $200,000 limit. Anyone holding one of my old keys could have run up that whole bill, and I had no idea. I dropped it to $100 lol. Check yours. The default is probably way higher than you think. If you’ve ever pasted a key into a chat, a doc, or a GitHub repo, treat it as leaked. Delete it and make a new one. Paste this into your AI with browser access: "Help me lock down my AI API accounts. Open each of these consoles in my browser: [list your providers]. For each one: 1. List every API key, when it was created, and when it was last used. 2. Flag any key not used in the last 30 days. Ask me before deleting anything. 3. Show me the current org-level spend limit and monthly budget, and where to change it. Don't create new keys and don't touch billing or payment info. Give me a summary table at the end." 4. Unshare everything. Assume anything with a public link has already been found. That includes Google Docs, Sheets, Slides, Notion pages, Claude artifacts, and any page an agent built for you. Nothing should be “anyone with the link.” Everything should be invite-only. My rule now is simple. If I’m not sharing it with a specific person, it’s locked. Paste this into your AI: "Search my Google Drive for every file shared as "Anyone with the link" or public on the web. Then do the same for my Notion pages and my published Claude artifacts. Give me a list with the file name, who can see it, and when it was last opened. Flag anything that looks sensitive: finances, IDs, medical, passwords, client info, contracts. Don't change anything yet. Wait for my approval, then switch the ones I approve to restricted, invite-only access." 5. Have your AI build your personal audit. This one is my favorite. Claude interviews you, then writes a custom prompt to check your last 30 to 60 days of activity. It also points out places you didn’t think to look. "Act as my personal security auditor. Assume my personal data (email, socials, medical records, phone number, old passwords) has already leaked in a breach. First, ask me 5 to 10 quick questions about the accounts, devices, banks, and tools I use. Then write me a step-by-step prompt I can run with an agent that has access to my email and browser. It should review the last 60 days for signs of trouble, like: - sign-ins, devices, or locations I don't recognize - password reset or 2FA change emails I didn't request - new accounts opened in my name - charges or subscriptions I don't recognize - connected apps and logins I forgot I gave access to - email forwarding rules or filters I didn't set up Then give me a ranked list of other areas I should lock down that I probably haven't thought of, highest risk first. Keep it in plain English." Don’t save this for later. Freeze your credit today, then work through the rest this week. Future you will be really glad you did.
- 0 réponses
- 0 partages
- 0 j'aime
- 9 vues