packtreefly

6 ms·

1.
by packtreefly 9mo ago
It's painful, but I've grown distrustful enough of the ecosystem that I disable updates on every IDE plugin not maintained by a company with known-adequate security controls and review the source code of plugin changes before inst
2.
by packtreefly 1y ago
They exist. Services treat control of the number as equivalent to control of the account, and expect you to maintain that control. Throwaway phone numbers are not a viable low cost or no cost alternative in most normal user signup scenarios
3.
by packtreefly 1y ago
> It’s surprising how something that seems harmless, like a simple recovery page, can actually hide some pretty serious security risks. This is something you should include in any personal security checkup. Attempt account recovery using
4.
by packtreefly 1y ago
"ThE tAx CuT pAyS fOr ItSeLf"
5.
by packtreefly 1y ago
I put the passkeys in a password manager, then lock the password manager with multiple physical Yubikeys, keeping several in secure storage. This same pattern works for Google/iCloud accounts.
6.
by packtreefly 1y ago
>I kinda just don't get wireless CarPlay/Android Auto at all. In addition to your argument, wireless CarPlay is also notoriously unreliable.[1] [1]: https://www.google.com/search?q=wireless+carplay+not+working..
7.
by packtreefly 1y ago
If the dongle acts as a wifi AP with a DHCP server, it could give the iPhone an ip address but no gateway upon connection. This will cause the iPhone to talk directly to the dongle via the WiFi interface, but talk to the rest of the interne
8.
by packtreefly 1y ago
To keep with that analogy, customers expect the SaaS company to respond to the HTTP requests for free, but you still have for-profit factories producing servers...
9.
by packtreefly 2y ago
No. I used both of them when migrating from LastPass, and found that Bitwarden only supports four or five types of entries, which ultimately drove me away from the product. The rich entry types from 1P and LP are nearly all converted to Not
10.
by packtreefly 2y ago
That's the endgame I see. Oligarchy. Kleptocracy. Morons cheering because they're deluded enough to believe that the definition of "pork" is when the government transfers money directly to lower and middle class via payc
11.
by packtreefly 2y ago
It's currently accessible to law enforcement via the law-abiding manufacturer acting as sole custodian. I don't see how this makes any difference.
12.
by packtreefly 2y ago
That counts as begging from my point of view. > Good luck getting data this easily from any other major manufacturer This is an industry-wide problem.
13.
by packtreefly 2y ago
The problem isn't that the owner didn't get the data. The problem is that the method for getting the data is that you must beg Tesla for it, rather than just slurping it out of a USB port inside the car. If Tesla is going to go to
14.
by packtreefly 2y ago
I'd recommend any good sound device that connects digitally, like USB or HDMI/Displayport. So the answer is that you should get a dedicated sound device, but don't bother looking for an internal card. External devices are eas
15.
by packtreefly 2y ago
> not having a mouse plugged in will mean you have no mouse cursor when remoting in. Parsec has a setting to fix that too. Look in the host options.
16.
by packtreefly 2y ago
It is the height of irony to me that a blog post complaining about clickjacking is presented on a website that is guilty of scrolljacking.
17.
by packtreefly 2y ago
We've got similar opinions here. I'm just pointing out that the overall experience here feels familiar, and it wasn't until reading this thread that I really put it together. I agree with you that I'd be surprised if Ens
18.
by packtreefly 2y ago
> they also removed the best deals from the app They've captured the user base with the money that corporate was pumping into the app deals, and are in the process of enshittifying it by transferring the value to themselves instead
19.
by packtreefly 2y ago
I will sadly admit that the high price of fries only angers me when they're not fresh.
20.
by packtreefly 2y ago
> The development environment where I'm downloading random libraries is on a completely separate physical machine than my primary computer. I generally spin up a short-lived container for each new coding project, that gets deleted a
21.
by packtreefly 2y ago
> my personal threat model ranks a compromised device ... much higher likelihood than me personally falling victim to phishing I completely understand that. I'd actually be interested in reading anything practical you might have on
22.
by packtreefly 2y ago
> you can order ahead and your food is ready when you arrive That just sounds like a great way to get cold McDonald's... > I think additional user data is a relatively minor part of it. You're probably right about that, but
23.
by packtreefly 2y ago
> I wasn't aware that WebAuthn didn't have this requirement. I prefer TOTP because I actually like having a second factor in addition to a credential stored on my computer's hard drive (whether a password or a private key
24.
by packtreefly 2y ago
A lot. MCD corporate seems determined to get on the user data gravy train, and appears to be subsidizing it for the franchisees. Three large fries ordered at the counter costs over ten dollars.
25.
by packtreefly 2y ago
Unfortunately, yes. Drugs are well-known to be the only product for which cash is an acceptable form of payment. The utility of hard currency really took a hit when all the hookers moved to Venmo.
26.
by packtreefly 2y ago
Dollar bills are usually in terrible condition. Folded corners, creases, dirt. Ten singles take up more space in my wallet than just about anything else I'd put in there. I'd rather have ten coins. They'll easily fit in the b
27.
by packtreefly 2y ago
> Restricting arbitrary downloads from curl, wget or bash (or better, any binary) makes these attacks pretty much useless. Any advice what that looks like for a docker container? My border firewall isn't going to know what binary ma
28.
by packtreefly 2y ago
That's a popular architecture, but I personally wouldn't run part of the application stack (HAProxy) on my network firewall, and would instead opt to move it to the media server. Suppose you have the media server in its own VLAN&#
29.
by packtreefly 2y ago
> TIP - To insure prompt service FYI, this backronym is nonsensical. It would only make sense if the gratuity were paid in advance, and then again only were it called a "tep," to ensure promptness.
30.
by packtreefly 2y ago
> I wonder what the market for throwaway phone number verification is worth. I pondered this recently, and it seems to top out at a couple bucks per shot. The problem is that the phone number tends to need to be persistent for the sake o

More ›