Yeah so I had this as well. Every day or so I’d get locked out, had to do the sms unlock thing which sometimes wouldn’t work.
What I did is I added an alias to the account, made it the primary and removed login priviliges from the ‘old’ one.
For all the things you still use the address, it’ll be fine. It’s just MS based logins that’s you’d have to change.
I think I need to read up on the fediverse a bit more. Technically it looks like anything in the fediverse at the moment is ActivityPub, even though it supports 3 more protocols. At this point, only Hubzilla uses something other than ActivityPub, even though it also makes use of AP. I was confused because Matrix is also an open protocol and also federated. I had figured everything federated could talk to each other underneath… That’d be the dream, right?
It’s the privacy vs convenience problem. For most people, the convenience is so much more important so when you can just use Google to sign in everywhere, you get rid of your passwords remembering issue (oh my god how many people have blamed me for losing their passwords, I’m an IT guy).
Companies want to maximise profits by ‘knowing’ (ie tracking) their customers so they can tailor their products or services to actual usage. A noble goal? They just want to be more convenient for us.
In the end I guess having an account anywhere and the companies seeing anonimised or aggregated, no personally identifiable records, should not be an issue. But they don’t need to keep track of where I live, what my e-mail adress or phone number is and especially need not now any third party stuff.
It has become a very untrustworthy business just because the companies could do whatever they wanted and now that there is more scrutiny, they just find back alley ways to screw us over.
I’m not familiar with how malware like that masks but you can pretty much find any traffic with a tool like WireShark. It’s just a matter of finding out how processes recreate themselves once killed.
If something lives in the storage of your router, specifically, I’d see about formatting the storage and flashing new firmware. As you stated, that may not solve anything.
Regardless of how they enter and what is installed where, once it’s inside your home network it can pretty much access anything. If you wanna be fully secure you’d need a firewall and just block any traffic you don’t specifically whitelist. As you can imagine, this is cumbersome.
Are you worried that something has infected your network devices? Do you have any reason to suspect something? In some countries, ISPs do some passive monitoring on what goes in and out of your home and if they see anything untoward they’ll disable that bridge device and notify you.