Appendix B
Glossary
| Term | Explanation |
|---|---|
| Lockout | The owner loses access to their own accounts/data |
| MFA / 2FA | Multi-factor / two-factor authentication |
| TOTP | Time-based one-time password, generated by an authenticator app |
| FIDO2 / passkey | A standard for signing in with cryptographic keys, highly phishing-resistant |
| Registrar | Domain name registrar |
| Whois | Public registration information for a domain |
| DNSSEC | Digital signing for DNS, preventing spoofed DNS answers |
| Registrar lock | A lock preventing unauthorized domain transfer |
| SPF, DKIM, DMARC | Email authentication records |
| NAS | Network-attached storage |
| RAID / SHR | Combining drives to survive drive failure; not a backup |
| Btrfs / ZFS | File systems with snapshots and checksums |
| Immutable snapshot | A snapshot that cannot be deleted/modified during its lock period |
| Air-gapped | Disconnected from the network, connected only when needed |
| SHA-256 | A hash function used to verify a copy is bit-for-bit identical |
| Prompt injection | Injecting commands into content to make an AI do unintended things |
| Least privilege | Granting the minimum permissions necessary |