Topic: Securing your Bitcoin talk account (Read 343 times)

You are right about them but some people prefer to use a VPN instead of TOR because there is some inconvenience for them when using TOR. The Tor browser doesn't store user login details so a user needs to log in every time he restarts the browser. Many avoid using TOR for this reason but there can be other issue but I don't use TOR for that. Also TOR seems slow which you already stated in your comments. 

Security is one of the most important section of the crypto space and internet as a whole.Security in the internet simply refers to measures we take to prevent our device, assets or  privacy from cyber threats or attacks associated with the internet.Alot of persons spend much time on this forum while others spend little intervals of time on the forum however both categories of users require security measures to protect their accounts from hacks and other cyber threats.below is a series of things one can do to protect them from such threats.

2.limit your logining into your account via public cafes or computer centers as this can pose threats to your login details such as email and password.if possible avoid using public cyber cafes for logging in, instead stick to using a particular personal device this will make it even easier to monitor your IP logins using this function below.

3.Avoid using similar or same passwords on majority of your accounts or logins on different platforms.(try to make your passwords distinct and different.)

5. Use the forum hide email address button to conceal your email.This feature is usually turned on by default for added security. However here is a guide to setting it up.

Doesn't using both tools really have the same goal? The difference is that Tor is free and it's a browser like any other with the difference that it provides the best level of privacy you can get at the moment. On the other hand, any VPN, regardless of whether it is paid or free, is a far worse option considering that it stores user data and shares it at the request of the authorities.

Of course, people use VPNs a lot more because that way their surfing speed is much higher than is the case with Tor, which is still much more sophisticated in terms of the privacy it provides, but because of that it is also a little more demanding to use.

But Tor cannot provide absolute anonymity, because if you have done something very bad, there are security services that can find your real location, regardless of how you tried to hide it.

Many forum users use the Tor browser to avoid IP detection. Some even use VPN to keep their location private.
~snip~

1.Always be sure to use a secure internet connection before logging in to your account as using unsecure connections exposes you to cyber threats which in some cases may lead to account ban due to using an IP with record of some units of evil on the forum.

2.limit your logining into your account via public cafes or computer centers as this can pose threats to your login details such as email and password.if possible avoid using public cyber cafes for logging in, instead stick to using a particular personal device this will make it even easier to monitor your IP logins using this function below.

Signing a message or proving account ownership using PGP signatures is good if you want to access your account if it is hacked, but one of your suggestions is bad. If you restrict IP addresses for the last 30 days, this enhances privacy, but it may not be good in the process of recovering your account because the recovery team has less information about you, thus making it more difficult to verify that you are the owner of the account.

BTW, email is a big privacy issue in general. It's too expensive (mainly time-wise) to create new email addresses, but if you use the same one, it creates tons of links. Ideally, you should use one email per service. I've had two ideas in this area:

First, you could create a simple email forwarding service like this:
 - Without registration (but maybe with a tiny fee via eg. Lightning), take a user's email address, generate a random key, and use the random key to encrypt the email address.
 - Also encrypt the email address with a server secret.
 - Give the user an email address of the form [email protected]
 - When the service receives email at a forwarding address, it decrypts the email first using its server secret, and then using the provided decryption key. Then it forwards the email to the email address
 - To destroy forwarding addresses, users could provide the service with both their forwarding address and target address, and the service could then send a confirmation email.

This would be convenient, and it'd fix the problem of services being able to connect users across multiple sites through email-address reuse. But it trusts the forwarder not to log the per-email decryption keys or give up the server secret key. Though if multiple services like this existed, you could chain emails through them to increase security.

My second idea is:
 - The user would be using his own software (like eg. Thunderbird or perhaps prontonmail). From this software, the user could instantly create low-capacity throwaway accounts on the server. Each throwaway account could be (or behave similar to) a POP3 account with low capacity (eg. 50MB) and quick message expiration (eg. 60 days).
 - The client software would use Tor and careful polling to download all of the messages on its throwaway accounts without leaking to the server info about which accounts are connected. To improve anonymity and efficiency, you could perhaps use PIR, or the server could publish hourly/daily bloom filters meant to match email addresses which received mail in the time period. The client software would collect all of the messages into a single inbox for the end-user. Since it polls frequently, the client wouldn't have to worry about the low limits on the individual throwaways.
 - The server could anonymously require a small one-time for each throwaway account by using blinded bearer certificates.

With this, the server shouldn't ever be able to connect any of the accounts together. You could also send mail from the throwaways.

The main thing necessary for this second idea is a really smart email client meant to juggle many throwaways. You also need a cooperative server allowing quick account creation (like cock.li), ideally via an API.

If you give your bitcoin forum id username and password very strong then there is no chance of your account being hacked. Also, if someone can't access your device then there shouldn't be any problem with your account. Moreover, you can recover your account with the original Gmail, so if it gets hacked, you can recover your account again.

7. Make use of secure browsers to avoid phishing attacks or leaking of your info to third parties.also avoid changing your email address frequently as this puts a message on your trust page for a certain period of time.

Seems you miss with another important points for securing Bitcointalk account, you can set up question security with your account when some one accessing to your account and try to change password. I think that feature is still available in bitcointalk profile security and make more secure with your bitcointalk account.
~snip~

But about signing a bitcoin address, I don't understand how to do it. Looks like I have to learn to do it.