Two-step verification means that when you sign in, besides the password you confirm a second time that it is really you. Tapping "yes" on a pop-up on your phone blocks more than 90% of phishing-based account takeovers. The older method of answering questions like "where did you last sign in" or "what is your backup email" stops only about 10% of them.
A password stolen from another website gets used to log straight into your email. Once someone is in your email, every account that can reset its password by email goes down with it. So give your email its own password and use it nowhere else.
The SIM card is the small card inside your phone, and text-message codes arrive through it. If you lose your phone, whoever finds it can pull this card out, put it in another phone to receive the codes, and then reset your accounts one by one. If you set a PIN on the card, then once the card is moved to another phone it asks for this code as soon as the phone starts, and that route is closed.
The order matters more than speed. First report the SIM card lost, which cuts off the lifeline of verification codes. Next lock the phone remotely, then use a computer to change your email and payment passwords, then call the police and get a receipt, and finally freeze your bank cards if needed. If you don't have your phone, you can borrow someone else's to call the carrier's customer service and report the loss.
"Signed-in devices" are the phones and computers that can still use your account right now. If the list shows a device you don't recognize, or software you stopped using long ago is still connected to your account, change the password first, then sign out of all devices. In your email, also check for any automatic forwarding you didn't set up.
A relay sits between you and the model provider, and it can see and change what you send and the answers that come back. One study tested more than 400 relays: 9 injected malicious code into the answers, and 17 used cloud-service keys that the researchers had planted on purpose. If you let the AI run commands automatically, one altered command is enough to let someone take control of your computer.
Moderate value
Evidence B
Keeps you free
Mainland China only 4 tips
These tips describe mainland-China rules and do not apply in the United States; they are here for people living in China.
If your card is swiped by someone else, you don't have to prove "this wasn't me." It is the other way around: the bank has to produce evidence that you swiped it yourself, and if it can't, it has to pay you back. This assumes you report it lost and freeze it as soon as you find out. If you delay, you bear the extra loss that follows.
If an app asks for information that this service doesn't need in order to work, it can't stop you from using the app because you refuse. What it may collect is also limited to what it needs. A map needs your location, but a flashlight app doesn't need your contacts.
You have the right to ask a company to let you see, copy, correct and delete your information. If the service has ended, the retention period has run out, or you have withdrawn your consent, the company should delete it on its own. If it refuses you, it must give its reasons, and if it does nothing, you can sue it directly in court. Closing an account and deleting information are two different things: after closing an account, you still have to make a separate request to delete.
As long as there is another way to get the same thing done, the other side can't require only a face scan. If you don't agree to a face scan, they have to offer another way, such as a card, a password or an ID card, and they may not pressure you by saying "then we can't handle your business." Face recognition equipment may not be installed in hotel rooms, public baths, changing rooms or restrooms, by anyone.
