• 0 Posts
  • 70 Comments
Joined 1 year ago
cake
Cake day: June 14th, 2023

help-circle


  • Could a hypothetical attacker not just get you to visit a webpage, or an image embedded in another, or even a speculatively loaded URL by your browser. Then from the v6 address of the connection, directly attack that address hoping for a misconfiguration of your router (which is probable, as most of them are in the dumbest ways)

    Vs v4, where the attacker just sees either your routers IP address (and then has to hope the router has a vulnerability or a port forward) or increasingly gets the IP address of the CGNAT block which might have another 1000 routers behind it.

    Unless you’re aggressively rotating through your v6 address space, you’ve now given advertisers and data brokers a pretty accurate unique identifier of you. A much more prevalent “attack” vector.


  • If you still do the sizing (it’s not entirely wasted as it’s a reasonably effective tool to gauge understanding across the team), This can still be done without the artificial time boxing.

    “How much work have we done in the last two weeks?” Just look at all the stories closed in the last two weeks. Easy.

    “When will X be delivered?” Look at X and all its dependencies, add up all the points, and guesstimate the time equivalence.

    Kanban isn’t a free for all, you still need structure and some planning. But you take most of that away from the do-ers and let them do what they do best… do.






  • Ok. Did a quick read. And I think I mixed my words a little.

    Yes, Active Directory supports TOTP fine.

    But my understanding is rollouts can disable TOTP, and instead force the use of the proprietary scheme requiring the MS Authenticator app (which also supports TOTP) that uses push notifications to the device.

    As is the case with my employer. They didn’t enable TOTP, and I am unable to use the provided MFA QR code with 1Password.









  • My brother behaves weird with Linux (fedora 39 silverblue).

    When doing multiple copies of double sided printing, it’ll print [1|2] [1|1] [2|2] [1|1] [2|2] and then repeat until you realise you now have onen copy of what you want and 10 pages of one side, and 10 pages of the other side.

    It’ll also randomly refuse jobs, and then print them 30 minutes later (lmao if you printed multiple copies, gave up and went for a walk)

    My Panasonic I replaced it with was better, but you had to download binary blobs to make it work.

    But, Linux has gotten more and more complicated in the last 20 years I really can’t be fucked working out if it’s the printer, cups, flatpacks, the app that’s printing, or all of the above.

    Now I just email myself a PDF and print from my phone. Fucking stupid but it works.