A guide for operators and builders in web3 to understand the inner workings of a web3 startup.
Joined April 2022
- Tweets20
- Following0
- Followers8
- Likes4
This excellent thread from @Jon_HQ walks through cold accounts for Discord. The same principles can be applied to other important services like Google Workspaces, DNS registrars, or hosting providers.
teapawt.net/Jon_HQ/status/15075382…
🚨 🚨 🚨 🚨 🚨 🚨 🚨 🚨 🚨 🚨 🚨 🚨
Every NFT Discord needs to do this NOW.
🚨 🚨 🚨 🚨 🚨 🚨 🚨 🚨 🚨 🚨 🚨 🚨
I don't think I've ever used as many emojis in a thread tweet before.
Attackers have shifted, and you need to learn how to protect yourself / your community.🧵1/10
1
For admin accounts with escalated privileges, consider a separate set of "cold" credentials that is only used for sensitive tasks + emergencies.
1
Regardless of your 2FA setup, remember that good security comes in layers. Always be on the lookout for phishing attempts and use a strong password with a password manager.
1
What to use instead? The most accessible options are Google Authenticator and Authy. Both are widely used and battle-tested. Less external dependencies = less surface area for attack.
1
And finally... SMS is unlikely to get more secure because this is simply not what it was designed for.
1
3) SMS depends on the phone network and texting providers to be up. That means if Twilio goes down, you could lose the ability to log in to some services.
1
2) Text messages are not encrypted, so attackers can easily intercept your text messages to get your 2FA token.
1
1) SMS is vulnerable to sim swap. All it takes to bypass is one customer service agent who thinks it's OK to redirect your texts somewhere else.
1
Friendly reminder to fellow operators that sms / text message is *NOT SECURE* for two factor auth 🧵
1
1
web3fieldnotes retweeted
Wild there's no clear leading product that allows crypto / web3 companies to both:
- pay employees, contractors, vendors in crypto
- offers a debit card for paying vendors / services in fiat that can be funded with crypto
To doxx or not to doxx? In this week's issue we go over the pros and cons of each, plus some tips on building trust while staying anon!
web3fieldnotes.substack.com/…
1
web3fieldnotes retweeted
We're proud to have a strong community and happy to have shared lessons & insights with our friends at @web3fieldnotes, c/o @marktanft
Check out the post here!
web3fieldnotes.substack.com/…
We interviewed @marktanft of @odyssey_dao about how the team sustains a 12k+ strong community!
Always excited to support groups that onboard more people into web3!
web3fieldnotes.substack.com/…
web3fieldnotes retweeted
You read our 2nd newsletter edition: "Secure the Discord"
web3fieldnotes.substack.com/…
You read our 2nd newsletter edition: "Secure the Discord"
web3fieldnotes.substack.com/…
Scams and spams are rampant in the web3 space, especially on Discord.
How do you protect your Discord members?
👇
Community management best practices, with insights drawn from our partners at @nft_playbook
Check it out!
web3fieldnotes.substack.com/…
Whether you’re a DAO, DeFi protocol, or NFT project, growing and keeping a community in web3 is tough!
Fear not: we have the article just for you
👇
1
3