7 years ago at Huobi, first day security training hit different:
"Every software you download on your work laptop is a potential virus. EVERY. SINGLE. ONE."
Me: "Wait, even WeChat? Office apps? What if I need them for work?"
Security team: "Yes. Default rule = zero self-installed software. WeChat, Office, anything can theoretically harvest and leak your work data.
If you absolutely need something, download ONLY from official stores and get security team approval first."
This is how serious CEXs treat opsec. Your personal device? Even more vulnerable.
Treat every app like it's hunting your seed phrase. Because it probably is.
"Every software you download on your work laptop is a potential virus. EVERY. SINGLE. ONE."
Me: "Wait, even WeChat? Office apps? What if I need them for work?"
Security team: "Yes. Default rule = zero self-installed software. WeChat, Office, anything can theoretically harvest and leak your work data.
If you absolutely need something, download ONLY from official stores and get security team approval first."
This is how serious CEXs treat opsec. Your personal device? Even more vulnerable.
Treat every app like it's hunting your seed phrase. Because it probably is.