Stop using 2FA text codes already

Today’s a short but super important security tip. If you’re still getting login codes via text on your phone, stop. That’s so 2010 and one of the biggest mistakes people make when it comes to online security.

Sure, it’s convenient. You type in your password, get a six-digit code via SMS, enter it, and you’re in. But here’s the problem: Hackers have figured out how to steal those codes.

Receiving that six-digit SMS code might feel like security … in the same way locking your front door but leaving the keys under the mat outside does.

It’s called SIM swapping. A scammer tricks your phone carrier into transferring your number to their device. Once they have it, they receive all your texts, including those security codes. Just like that, they can log into your accounts.

And if you have your devices set up like mine, where each one receives all your texts and emails, someone around you can easily access your accounts.

So, what should you use? Glad you asked.

An authenticator app 

You want to ditch texts and use an authenticator app. I recommend two free and trusted ones:

✅ Google Authenticator

✅ Microsoft Authenticator

These apps don’t send codes to you. They generate them right on your phone, changing every 30 seconds. Since nothing’s being sent over the airwaves, hackers or snoops can’t intercept anything.

Even better, these codes work offline. No signal? No problem.

Continue reading

A no-brainer if you have a dog: Fido Alert is like an Amber Alert for pets. Register your furry friend and you’ll get a free ID tag that includes a QR code. In case your pet goes missing, alert the Fido network. Then, if someone scans the QR code, they’ll get your contact info and you’ll get a notification. I keep an AirTag on my golden retriever, Abby, and she wears a smart collar.

Free package on your doorstep?

Open/download audio

Hackers are mailing fake Amazon packages with QR codes inside. Scan it, and malware hijacks your phone in seconds. Here’s how to stay safe. 

📱 Scan at your own risk: Do not be among the 73% of Americans who scan QR codes without checking them, or one of the 26 million who landed on malicious sites. Scammers slap stickers on parking meters, utility bills, even mystery packages, anywhere you might casually scan without thinking. One quick scan can send you to a fake payment portal, install malware or steal your logins in seconds. Welcome to “quishing,” where every innocent-looking QR code could be a booby trap. Never trust a QR code you didn’t expect.

103 mph

That’s how fast Jacob Misiorowski’s fastball has been clocked, in Triple-A. In the majors, he’s averaging just 99.7 mph, nearly 6 mph faster than the league average. That’s a massive gap in baseball speak. The Brewers rookie started his big-league career with 11 hitless innings. Basically, he’s playing MLB on rookie mode, with cheat codes.

📺 Netflix secret codes: If you’re using a web browser, try Netflix’s hidden category codes. Just type “netflix.com/browse/genre/” followed by the number. Two of my favorites: 81466194 for 90-minute films and 2013975 for family movie night. Want more? Here’s a full list you can try.

Coder in Cellblock D: Preston Thorpe might be serving an 11-year sentence in Maine, but that didn’t stop him from landing a full-time software job at a VC-backed startup based in San Francisco. The company found him through his open-source contributions. The kicker? He codes from prison as part of a state rehabilitation program.

🚨 New Uber scam: You request a ride, the driver accepts and you get a call saying you need to verify your account. The scammer asks for your phone number, email and verification codes. Give it up, and they log into your account and steal your money. 

📸 Google Photos turns 10: Happy 10th bday to Google Photos, now AI-powered and ready to remove your ex from pictures like they never existed. A new editing tool called “Reimagine” will let you circle a part of a photo and prompt it to redo reality. Also, QR codes for albums. iPhone owners? You wait.  

Grad name reads go full robo: Pace NY grads scanned QR codes at graduation, then heard their names announced by an AI voice that sounded like a sentient Waze app. Phonetic accuracy? Maybe. Vibes? Students compared it to checkout somewhere between dystopia and Duane Reade. Four years of debt, and Alexa stole your thunder.

🎨 Designing with AI? Instead of saying “red” or “blue,” use HTML color codes for perfect shades. In ChatGPT or any bot, say, “Use this color palette: primary (#ffc745), secondary (#007a78), accent (#c0c0c0).” Try Adobe’s color wheel to find the codes and see how they look together.

Cheap gas? Yes, please: The free Upside app gives you cash back on gas, groceries and dining out. Download Upside and use promo code Kim to get an extra $0.25 back for every gallon on your first tank of gas.

Fill ‘er up: The free Upside app gives you cash back on gas, groceries and dining out. Download Upside and use promo code Kim to get an extra $0.25 back for every gallon on your first tank of gas.

$4.1 million

Average listing price in Hawaii’s priciest ZIP code. Welcome to 96754 on the “Garden Island” of Kauai. I’ll take this 3,315-square-foot four-bedroom, four-bathroom home that’s a mere $12.45 million. Hey, it’s close to Zuck’s compound he says doesn’t have an underground bunker. Yeah, right.

Cash back on gas, groceries and dining out: No gimmicks — it just works! Download the free Upside app and use promo code Kim to get an extra 25 cents back for every gallon on your first tank of gas.

Watch out for QR code email scams

Open/download audio

QR codes are everywhere — restaurants, stores, even buses. But scammers are taking advantage of that convenience.

Insider tips to get low prices online

Open/download audio

Online shopping is like a game, and I’ve got four cheat codes to save you serious cash.

🍕 Slice, slice, baby: Pizza Hut is giving away 1 million pizzas for National Book Month. Order online or through the Pizza Hut app, spend at least $8, and use the code BOOKIT40. The offer runs until the end of October … or until the free pizzas run out. This alone is worth the price of my newsletter. Oh, wait, it’s free!

The exploding pager espionage caper

Open/download audio

Thousands of pagers and walkie talkies mysteriously exploded all at once in Lebanon, set off by a secret code. What happened? Get the story in this quick podcast.

Share your Wi-Fi password the easy way

Open/download audio

It’s always a pain to share your home internet password. I’ve got a tip to make it easier: all you have to do is create a QR code.