• 0 Posts
  • 310 Comments
Joined 2 years ago
cake
Cake day: July 3rd, 2023

help-circle
  • If my personal laptop is stolen, my drive encryption will protect my data. Without that, physical access is enough to pull info unencrypted. A user password will prevent OS access both locally and remote. If someone happens to get my password or bypasses my login somehow, I don’t want them to be able to open my email and read messages, or open a browser, go to a logged in Amazon page, and be able to order items. I personally don’t keep anything logged in and everything logs out when my browser is closed. It’s inconvenient, but to the tune of an extra minute each day to login to everything.

    Really, you just have to decide your risk tolerance. Businesses have a lot at stake and therefore it behooves them to force strict auth policies. If you aren’t concerned about your personal stuff, set a login password if you want, and put your creds in browser, but I’d urge to at least use a password keeper over a browser.



  • I’m gonna have to disagree even though it is an annoying process listed above.

    In this case there was a drive encryption password to prevent data theft if the device is stolen, OS login for user level access, a password keeper login at the application level, and MFA on a different app. That is 5 different auths (drive, os, pw keeper, email, MFA) for 5 unassociated objects managed by potentially 5 different entities. The only reason this was an issue was the dead phone for MFA, which is a user error. It super sucks that this is best practice because of bad actors, but this is baseline auth.

    I am curious how you would do this differently though if you’ve got ideas. In this case, assuming the OS is Windows and email is Outlook, this could have all been handled with SSO, which would have only required the first two passwords, which is my daily work experience. However, I then get into Bitwarden and log into any not SSO apps I need and have MFA configured for all that support. I work remote a lot and my company is looking at an always VPN connection for everything. That would require me to go through another level or two of auth.




  • I was a carry-out at my local hardware store for a few years in college. I brought carts in from the corrals and helped people load heavy stuff. I’ve seen and been victim to the damage caused when a rogue cart catches the wind and fucks off down the parking lot. People that leave their cart not in a corral or inside disgust me more than more most lazy people.

    You’re my hero, dude.














  • Does Jellyfin have remote play? I’ve had a lifetime PP for years now, but most of my users don’t. I will be installing Jellyfin tomorrow to run parallel until it can be a full replacement, or just forever.

    I just was asking someone on here a few weeks back if switching off Plex while already having a PP was worth it. I think the gist was no rush since it’s working, but this news is my canary.


  • I learned on automatic but got a manual about 5 years ago. This past November I went on a trip with friends and we were able to rent a manual car for cheaper because I could drive one and it was the norm in the country we were in. Nice skill to have, but not required. I’d learn manual if you have the option.