karmicthreat

I really like how the TOTP Yubi Authenticator app works. Just saves my secret to the Yubikey and I can save that secret to multiple keys. Then put a printed copy of the QR-Code in the vault in case I get hit by a bus.

This covers destruction of phone, destruction of office, destruction of Yubikey, destruction of me.

I would like to use U2F, but some companies (looking at you AWS team) only allow 1 MFA method period. And that just doesn't work.

Just looking at the front page of BitChute it seems more conspiracy crazy than just recordings of crazy things happening.

Your body is non-stop taking damage every day. Its when the body can't compensate fast enough that its a problem.

The load from an mRNA vaccine is miniscule compared to severe, or moderate covid.

Your service should probably be sitting behind the firewall/router/proxy. But you really should consider your options and if the service itself needs to be exposed directly to the internet.

At work I use fortigate equipment and keep it updated.

At home I have sold my soul to Bezos and just use an Eero.

Its enough that a certain percentage could survive in "fake it till you make it" long enough to gain enough experience to do well.

But you have to be a pretty determined self-starter.

I guess within the features I use its been a better experience. i use it as a NAS and DVR. The snapshotting and change reversion features have saved me a few times where engineering employees have messed up their files.

Thanks for the point about NFS though.

Other than your router you should not have ANYTHING directly on the internet these days.

There is just too much surface area for device software now and cost pressure doesn't allow for security to be much of a priority.

Synology has always had better software. But they have been more expensive and they have been threatening to lock out some features unless you use their drives.

There is no real competitor on the market right now except QNAP. And who wants to deal with FreeNAS, I have better and more important things to do with my time at work.

One of the key features to making this work is the attack protection features these services have. Okta, Azure, Auth0 all have this. Is there an open source alternative? Seems like we would need a service, like SPAMCOP is for email, to make it work.

You need to cool the battery enough though. So you need water to carry away enough heat.

And they did, it's just that something so "safe" is just completely bland and useless.

From what I understand their E and F series APs are solid, the ones before just had bad performance.

The switches have been pretty solid. Everything can be managed off the fortigate, I think they also have a cloud management platform.

A fortigate 30E is around 400$. So it's a little more but their lower end equipment is definitely affordable by small and medium sized businesses.

For people needing alternatives. I've had good luck with foritgate. Some of their APs are dogs, but the fortios in general has been decent.

It isn't, but frequently the default editor is set to vim. That said I would question the judgement of anyone that judges you based on your favored editor.

Except emacs, those folks will burn in hell.

I know. It's just the fallacy that "Oh my last code base was flaming dog shit! Surely rewriting it will fix everything!". It never does. Sure, things might improve. But probably not unless something is really different about how they are doing v5 vs v3. Nothing they have said indicates that.

I'm probably being overly cynical.

The letter on their site is dumb. It's the complete wrong approach to security. They have an implicit assumption that v5 will be perfect and totally not going to be exploited right out the gate.

They would be better off focusing on securing their existing site. Log EVERYTHING, make sure you don't have any ways to inject SQL, make sure that if anyone can break out server side they can't get to anything useful. Just basic stuff.

That said, they don't owe anyone anything. It's all volunteer, but if you are going to do it do it well.

Yea, really. What's so difficult about X usually means you have not thought about the problem enough.

What's so difficult about making an app? You mean other than having to have some understanding of 20 years of tech its built on top of?

The worst thing about this system is it doesn't make a decision and stick with it. It just kind of meanders between lanes. Then when it realizes it is going in the wrong direction it does the wrong thing to get back on track. It should just follow a turn lane and renavigate.

I spent probably too much time playing https://www.realmsofdespair.com/ in college.

I think what would help it for me is if it had the option to page through incrementally. Rather than scrolling back and forth to see what I wanted to.

For a whole lot of Chinese, Han and others, China is a better place than it was 40 years ago. I think this gives the government there more power than it should really have over the attitudes of its people. Maybe as we get 2 or 3 more generations in the general attitude toward the government will shift away from justifying anything for the sake of Chinese unification.

I definitely hate China's oppression of its minorities. I think we are seeing the true color of a nation that knows nobody will challenge them. When people try to color it by claiming "different cultural norms!" I just think, well if you just want a culture of evil, this is a good way to do so.

Also I have a smaller hate for the scrollamated site, it's so distracting.

I've been hoping someone would fill the shoes of Ian M Banks. QNTM is probably some of my favorite fiction in the same vein. Lena https://qntm.org/mmacevedo in particular deals with some very frightening ramifications of brain simulation. Just running a simulated mind through a deterministic "Red" (ie: torture) script to prep it for the work you need it to do is frightening.

Jeph Jacques of QC fame did Alice Gove which was a good Banks like comic. https://www.questionablecontent.net/alice1.html

I also read quite a bit of Kris Schnee's work https://www.amazon.com/Kris-Schnee/e/B00IY1HDDY his earlier Thousand Tales novels I think deal with early brain scanning issues well. IE: Flatbed scanning a living brain.

Is Tor even secure against state actors anymore? I always assumed that the 5 eyes countries at a minimum have enough nodes to track you down.

I have some legacy IoT devices in the field that directly talk to sendgrid. Would be a big pain if I had to recredential them. So I stayed on sendgrid.

My newer devices get their email proxied through a proxy I host. It was a dumb mistake on my part to tie myself to so tightly to a SaaS vendor.

We can agree to disagree here. You have no recourse when one of the Sendgrid shared IPs you are using gets put on Spamcop. Sendgrid might get around to working with them to remove it in a couple weeks. You also have no way to eliminate that IP from your pool of IPs. So in my case about 40% of reports I was sending out were getting blocked at the email server of the receiver. Buying a private IP is your only recourse. Unless your emails don't matter, in which case it might be fine to lose 40% of them.

Also, get a private IP from your email service. Don't use their public ips. Or you will cry as the IP they have you on will randomly get put on SpamCop.

Even with my private IPs I've had random anti-spam services just decide to list all Sendgrid IPs.

Oh, you misunderstand. IT is an impediment to many control engineers. It's the automation techs and engineers that will work around the IT department if IT can't supply solutions. One of the more common ones being hide an AP or like in the article, use teamviewer or other remote access software. Then just share a common credential because nobody wants to actually pay for teamviewer.

Businesses need lower cost because they are under price pressure. Especially with small utilities. Remote access is one of those ways to lower their costs on personnel or vendor support.

There is still a whole lot of low hanging fruit in automation for improving security and access control. We're not going to get it from Rockwell for sure though.