Skip Navigation
UID_Zero UID_Zero @infosec.pub
Posts 0
Comments 88
NIST proposes barring some of the most nonsensical password rules
  • Please don’t take those recommendations out of context.

    They also recommend MFA, but people only ever bring up the “no rotation” bit.

  • Trump supporters really rallying behind a felon and racist
  • I see a "Women for T****" sign down the road. That's what the words say, anyway. What it says to me is "I vote against my own best interest."

  • Nothing is requiring employees to be in the office five days a week
  • Yeah, rough day. Reading shitposts and laughing at all the other orgs that were down...it was a blast.

  • Nothing is requiring employees to be in the office five days a week
  • Some people prefer offices, others not. My employer gave us the option of where we work, and it's been working out very well. About 5% chose to be in the office, another 10-15% are hybrid, the rest are fully remote. With proper support from management, it works great.

  • CrowdStrike sued by investors over massive global IT outage
  • Investing comes with risks. Sounds like they're sour about being on the losing end for once.

  • *Permanently Deleted*
  • I'm indifferent to them. I use their products, but I'm not a huge fan. I use them because I dislike the alternatives more.

    I've been considering trying to degoogle myself, but honestly it would be complicated, and there's a wife-approval factor that likely hinders that. We have multiple Chromecasts, Next hubs, etc around the house, and my wife likes the ease of use. I am slowly building up a home assistant instance, but still tying it into the Google home integration for ease of wife approval.

    I use what works best for me, and right now most of those options are from Google.

  • [SOLVED] First time installing linux (Debian). Got this error. Please help
  • Interesting. Looks like perhaps your boot loader isn't properly pointing at your root partition.

    I'm assuming you've just done the install and never successfully booted, yes? In that case, you can try to re-run the installer, or try rescue mode and try repairing the bootloader.

    Are you doing dual-booting, or is this system dedicated to Linux?

  • Microsoft asks many Game Pass subscribers to pay more for less
  • Same situation, I packed up my Xbox because we're looking to move. Cancelled Game Pass Ultimate sub for now, but maybe I don't end up resubscribing.

  • iPhone users, what's stopping you from switching to Android?
  • Fair, but I meant updates from the original manufacturer.

  • iPhone users, what's stopping you from switching to Android?
  • You gain very little from security because nobody is targeting you...

    It's not about being targeted, it's about being caught in the big fishing net that scammers are throwing. You don't have to be targeted to have security concerns.

    If a phone isn't receiving regular security updates, I won't use it. My Pixel 5a just got replaced because it's coming up on end of support. My new Pixel has 7 years of support, so I feel a lot better about keeping it longer.

  • Away from home for months; homelab unreachable; now looking for UPS
  • There are probably newer ones that come with LiPos. But every consumer grade one I've seen is traditional lead acid batteries.

  • Away from home for months; homelab unreachable; now looking for UPS
  • ...(it is kinda like a bomb after all)...

    WAT? I've never heard a UPS referred to as "kinda like a bomb" before.

    Keep your UPS maintained, replace the batteries when they age out, and it will be fine. If your UPS supports automated self-tests, use them.

    My employer has UPS units spread all over the region we operate in, and we don't have any issues, despite leaving them mostly unattended for years. I have several in my house and I've never given them a second thought aside from battery replacements.

  • Got an email from ISP
  • My VPN app took a shit in the middle of a download and I think it exposed my IP to some “anti-piracy” bullshit firm that contacted my ISP.

    I think you answered your own question.

  • Am I old now?
  • The ID on the phone thing is weird. Like I’m gonna give my phone to a cop when they ask for my ID. That’s a nope from me.

    That just seems like a privacy nightmare. No one touches my phone. There’s way too much personal info on there to hand over to anyone, much less cops.

  • How do you backup 2FA setup codes/QR codes?
  • My phone has a passcode, so does my password manager and my MFA app - all different passwords. Those are the only ones I need to remember, so it’s not too bad.

    Probably not ideal, but to break that someone needs to A) physically get my phone, B) unlock my phone, C) unlock my pw vault, and D) unlock my MFA app. I’m fairly confident in my setup.

  • How do you backup 2FA setup codes/QR codes?
  • Same, but my seeds are stored in a separate vault from my passwords. Seems like having MFA and passwords in the same place defeats the purpose. I used to let keepassxc auto fill MFA tokens, but finally changed to a separate app.

  • E-Mail-App for Android with Exchange / Activesync
  • I use it for my work mail. I can’t speak to their privacy, but I think it’s ok. So far as I know they haven’t done anything stupid, and all the connections are only from my device, no cloud intermediary.

    I do like that it allows you to only apply the ActiveSync policies to the app instead of the entire device. If my employer remote wipes my device, it only impacts the app.

  • Emergency First Aid
  • Also that if you’re doing CPR alone don’t bother with the breaths, the chest compressions are more important - only do breaths with a second person so you can keep compressions going uninterrupted.

    I took a class last year that said this. It was "Shock and Compress." The compressions are doing more good than worrying about breaths. And delegate someone to find an AED.

    It felt a little silly taking that class given that I work for a health org, and I'm fully remote. The odds of my needing to know if seem pretty low, but you never know when it might be important.

  • Has anyone here ever tried Linux From Scratch?
  • Yes, back in the early 00s. We toyed with making a net-bootable image with it for our computer labs, but it was really not practical. It definitely taught me a ton about systems, though.