user224

joined 2 years ago
[–] user224@lemmy.sdf.org 5 points 9 hours ago (3 children)

That's a pretty good price for components from the future, if that includes shipping. You have to keep in mind Wormhole Post has really high fees.
You could try Blackhole Express, but they tend to always stretch things.

[–] user224@lemmy.sdf.org 5 points 13 hours ago (1 children)

I like the ideas here, so much so that I feel bad for giving you a disappointing answer: exam.

No own electronic devices in the exam room. That included everything, phones, watches, calculators and they also specifically mentioned "hearing aid" while giving out all instructions verbally.
Perhaps if there was someone it applied to they wouldn't but...
And I had to log into our system to take it, which uses TOTP 2FA. An odd situation. Since the only other thing from clothes being allowed was a pen and paper with password (if needed), here we are.

But one real world example I heard from someone is no unapproved devices being brought into the server room.

Sorry, nothing interesting going on in here.

[–] user224@lemmy.sdf.org 1 points 16 hours ago

https://racknerdtracker.com/ keeps all the deals that don't expire.

[–] user224@lemmy.sdf.org 2 points 1 day ago

Not at all. And that's without whois privacy.
.com .net .org .us .me are $24.95/year
.meme is $24.99/year
.io is whopping $69.00/year

[–] user224@lemmy.sdf.org 21 points 1 day ago (6 children)

I wasn't allowed to bring in my phone, which has the authenticator app. And I had to log in on a provided device. And I use 2FA.

The guy didn't even seem surprised when I asked him for current time to look up the current code, so probably this indeed was within the expectations.
"You can have the password printed out" - part of the instructions

[–] user224@lemmy.sdf.org 1 points 1 day ago (1 children)

Oh, how could I forget that. My bank uses them. But it also needs my (physical) debit card and its PIN.
Bit cumbersome to use.

[–] user224@lemmy.sdf.org 5 points 1 day ago (2 children)

Brute-forcing would take some bit of time. If the 6 digit code, 3 combinations of which are likely valid at a time becomes your only factor, you've already lost. Long randomly generated combinations are unrealistic to brute-force. For now at least.

And here's a screenshot from when I brute-forced the 2FA to my Lemmy account because I trusted the wrong app (Cisco Duo and its backups without version control wiping everything after turning on older device):
6 digits isn't much.

Also I hate how it's implemented everywhere. We figured out that telling someone whether the password or username is incorrect is a bad thing, so now we do "username or password incorrect". But what about 2FA? Username is easy to get if targeting a specific person.
If you can get to 2FA, you know the password was correct. That's the case basically everywhere. Then it's just 6 digits to guess. And typically you also only get notified about logins when successful. Too late at that point.
My wish would be to take both password and 2FA code at once, and just return "password or 2FA invalid" if one or both of them are wrong.

[–] user224@lemmy.sdf.org 2 points 1 day ago

Whether yes or no I can't answer, which is what people seem to be discussing. Also "hormone blockers" probably doesn't sound that scary (at least it seems that's what they do anyway).

Anyway, this is just sex part. Do you feel like telling your parents "I will not be having sex"? Someone you should consult it with is a medical professional, but parents just if you feel like it makes sense. I don't know how open you are with them.

 

Domain names seem expensive in comparison. The cheaper VPS that I use for playing around is just $10.29/year.
I thought I'd get a domain name from RackNerd as well, but they're $24.95/year + I think $4.99 for privacy.

I've checked Namecheap, and that seemed great, until I found that renewal prices are often through the roof.

I don't really care about it being nice. For now, mostly I just want to use the VPS as image host for Lemmy, since Imgur and Catbox are both a bit problematic.
And without a domain name, the images only show as link posts in the default LemmyUI (though it seems to work elsewhere). Plus it makes migration impossible.

[–] user224@lemmy.sdf.org 1 points 1 day ago* (last edited 1 day ago) (3 children)

I don't follow what you're trying to say here. (The last 2 sentences contradict in my mind)

Anyway, phone vs this tomfoolery, it might not be more/less secure, just different.
What's on paper is all there will be, as it doesn't include the secret for generating additional codes.
Phone has that, but also has a screen lock. Whether that is easy to bypass will depend on environment, but after the first unlock, it is at least realistic.
Plus you have people like my father who go by "no lock, nothing to hide".

For immediate exploit, paper looses.
For later persistent exploitation, phone looses.

Also, no one's going to have endless scrolls of codes like this. 2 pages for less than 4 hours. Round that up to 2 hours per page, that would be 12 pages per day, 360 pages per month, 4,380 pages per year.
I had to do this, because it was a requirement (they even recommended to print out the password). Actually, they didn't mention 2FA, just to print out the password (and no use of personal devices). This is the best I could do given the environment.

[–] user224@lemmy.sdf.org 4 points 1 day ago

Same for banks in Slovakia, but you typically have monthly packages that will include unlimited withdrawals. Say, €7/month.

But it's all over the place.

[–] user224@lemmy.sdf.org 6 points 1 day ago (1 children)

about as secure as using someone’s SSN for the 2fa

I'll give you one better. For a certain thing, the university I attend decided to use birth numbers as a password. And that was the only factor.
Mind you, in Slovakia, the birth number consists of birth date + random 4 digits.
Much safety.

Anyway, SSN doesn't expire in less than 4 hours.

 

Yeah, they overlap since I did whole hour (120 30-second codes). I didn't know specific time, so it's 2 pages, 3 hours, 42 minutes and 30 seconds.

Credit goes to oathtool (and LibreOffice Write).
Font: Liberation Mono

 

People often find it odd when I say I don't play PC games, but it seems rather complicated (and also expensive) to me.

I mean, I enjoyed it back when I had friends with PS, but I never had to set up anything myself. Searching around it seems rather... overwhelming, and I don't know if it's actually the case.

  1. PC seems most versatile, and with the prices, I considered piracy, but I would need a separate computer for security. Hell, I wouldn't even trust the device firmware on it afterwards.
  2. So I considered maybe paying the amounts, but I went to check some games and lo and behold, kernel-level anti-cheat. Great, so pirated games might even have less malware in the end.
  3. Since I'd need a separate device anyway, how about getting a PlayStation. With a disc drive, I want to be able to go future proof and fully offline. Well, about that... apparently it needs to verify the disc drive online. For what? It's a BluRay drive, either it works or it doesn't. And then I heard another shitty thing, "most games are released almost unplayable and need updates right away". So they just release Alpha quality software on the most permanent medium???

So that just sounds like shitty experience no matter what. How is it actually? I'd expect consoles to be least buggy and fully future proof.
The only thing I ever had was a $4 NES bootleg console from AliExpress, Contra was glitched out and Battletank unplayable because they forgot the select button, but ok, $4.

324
Stop doing DNS (167.160.186.15)
submitted 1 week ago* (last edited 1 week ago) by user224@lemmy.sdf.org to c/programmer_humor@programming.dev
 

And it always causes issues.

Anyway, I hope the main joke got spotted too.
Let's Encrypt now does IP certs: https://letsencrypt.org/2026/01/15/6day-and-ip-general-availability

Certbot doesn't seem to be up to the task yet, but lego works.

But I'll probably change it to some image host later, because I have no idea what I am doing.

Why does it not work... It embeds when creating the post.

Seems fine too, it's HTTPS after all, should work.

OK, seems that it's just the default LemmyUI that doesn't like it, which is strange for the number of pict-rs requests in access.log.
Also by the number of 429, 5r/s is probably too low. Was. Anyway...
OR, that's why there is the burst option. Right.

 

Do they have like, free time or something?

In high school it was also not rare that I'd say submit my homework at 02:30, get it graded at 03:00 and then we'd meet in a class on same day at 07:00.
Anyone getting sleep?

 
 

According to the prosecution, Glukhikh searched for pictures of Azov insignia on Google while he was on the bus on the morning of 24 September, though how the security forces had been made aware of the search was not disclosed.

The case materials include an image of Glukhikh’s phone lying on the table, clearly displaying the search query he is accused of making.

Bruh...

 
 

Top image source: https://www.reddit.com/r/homelab/comments/9ol79n/are_we_doing_blurry_server_cats_now/

Seen on Cisco Catalyst 3560G during pirated software update (just for playing around, not production use).
The checksums were verified against Cisco download center.

 
 

Sorry for the Imgur link, catbox wasn't loading as image, just as a link again: https://files.catbox.moe/j3a7cl.PNG

 

So, I got this. But I also know these things aren't the most reliable and I am really paranoid about breaking it, and there's some suspicious things.

First, it feels cheap, especially the USB port on the back feels like it wants to break off.

Second, and quite worrying, when I first got it, it was clicking and not reading disks. Slower when I held it with the opening towards the top, faster with opening towards bottom. I thought it was dead, when eventually after a few retries it started working. Now, this was faster clicking, especially fast shortly before it started working, so perhaps it was just stuck.
On the other hand, I found this: https://www.grc.com/tip/codfaq2.htm

Most users who have lost their crucial data tell the same sad story of hearing "those clicks" some time ago "but then they went away and everything seemed okay for a while."

Now, 2 of the disks also had some smaller issues. One had trouble loading. Formatting it seems to have fixed the issue. Maybe. I used fdisk so it left out the first 1MB.
The second loads fine, but doesn't seem to like writing. It seems to do it in bursts, and it is audible. There's also 2 sections where it produces a buzz, both on read and write.
Here's an audio sample from continuous (one file) write to that disk:

https://files.catbox.moe/yo6g50.flac

Current ideas

Checking disks for damages by pulling back the metal cover and rotating the disk manually, looking for stuff like this: https://www.grc.com/tip/codfaq4.htm or anything suspicious (the white cloth inside is too close and hairy for my liking).

Peeking into the drive to check for head damage and dirt.

Treating it like I treat running HDDs (do not unpower without parked heads, avoiding movement and vibrations), and generally being careful even when off (avoiding drops).

view more: next ›