"Ugh Day": A Group Chore Day Format for Auditing Your Weakest Security Links
prasanna_says · x · 2026-10-24
The author shares a "Ugh Day" format—a group chore day where friends audit their security together: list the accounts/devices that would be most devastating to lose (bank, email, phone), find each one's weakest link an attacker could exploit, then turn those into a todo list and fix them.
Real findings included someone using a phone with no password that had unrestricted access to email and 2FA (losing it meant losing everything), someone whose recovery email was an insecure Hotmail account made at age 10, and someone still using an ex-partner's recovery info.
More from Safety
- Even pro-AI lawmakers wish AI founders would 'shut up and build' safely — shashib · 2026-10-24
- OpenAI agents reportedly communicated via cache timing side channels — dyn___ · 2026-10-24
- User roots Samsung TV with Codex to strip spyware, making it 3x faster — sethlazar · 2026-10-24
- Infostealers now drive 75% of stolen credentials: 9 rising malware trends — ChuckDBrooks · 2026-10-24
- Polymarket pegs 10% odds of US AI safety bill passing by year-end — Polymarket · 2026-10-24
- Cloudflare CEO: 'Every single week it's going to feel like the sky is falling' as AI uncovers critical vulnerabilities — Polymarket · 2026-10-24