Lately, I've been watching social mining and fan token schemes—"attention is mining." The more lively it gets, the more cautious I become: when attention is concentrated, phishing sites also concentrate their attacks, and the more links there are, the easier it is to slip up. I really treat mnemonic phrases as something that should "never appear in any input box," not to mention screenshots, and typing is even worse; signing is even more tricky. Some pop-ups look like they’re offering points, but after clicking, you realize it’s granting unlimited permissions—that is, handing over your wallet. If it’s not necessary, don’t connect; if you can use a secondary account, use that. I regularly clear my authorizations—my obsessive-compulsive tendencies actually save me. I’m most afraid not of losing money, but waking up one day to find my account wiped out by a "promo page."