Yep this is exactly right. Too many people are unaware that their votes are not anonymous on Lemmy and blocking the public tool only helps the bad guys who already know this. I’ve always thought this was a major weakness in Lemmy but I don’t have a solution myself without some other major drawback.

I think probably votes should be anonymized or batched between servers so that only your instance’s admins can see individual votes and you just have to trust the instances you federate with that they aren’t pulling any shenanigans or otherwise defederate. That’s not an easy problem to solve, but it’s not like it’s not currently possible to manipulate votes with a federated server, it would just be harder to detect. Regardless I think the need for privacy wins here.

I use it for providing a text summary of YouTube videos that I can parse quickly. Because everything has to be a gorram video these days.

I agree with the first part but vehemently disagree with the third paragraph.

I suspect it varies wildly based on where you live, but in Chicago there absolutely ARE places with waitstaff worth getting a burger from.

Then you apply the scientific method and/or research in search of truth.

• https://en.wikipedia.org/wiki/Scientific_method

• https://en.wikipedia.org/wiki/Research

I’ve been using Droid48 forever. It’s perfect.

https://play.google.com/store/apps/details?id=org.ab.x48

https://github.com/shagr4th/droid48

I’m not sure about color support without HTML or add-ons, but Obsidian is a good markdown editor with a lot of functionality and extensibility.

It’s not open source but it runs on everything.

I found it amusing that these posts were adjacent.

The definition I learned for web 2.0, as it was happening, was a shift from static web pages generated all at once on the server and delivered to the client whole, to using Ajax with in-browser Javascript dynamically changing already-delivered pages with back-end XML calls.

Look man, it’s okay to be wrong. It’s a natural part of growth.

But when you double down on your ignorance instead of taking the opportunity to open your mind and listen to the experts in the room, you just end up embarrassing yourself.

Try to be better.

We can restrict the use of software TOTP, which is what companies are doing when they move users onto the MS Authenticator app.

Admins can’t control the other TOTP apps like Google Authenticator or Authy unless they go full MDM. And I don’t think someone worried about installing the MS Authenticator app is going to be happy about enrolling their phone in Intune.

Edit: And even then, there is no way to control or force users to use a managed device for software TOTP.

This is incredibly well said and I agree 100%. I’ll just add that software TOTP is weaker than the MS Authenticator with number matching because the TOTP seed can still be intercepted and/or stolen by an attacker.

Ever notice that TOTP can be backed up and restored to a new device? If it can be transferred, then the device no longer counts for the “something you have” second factor in my threat model.

While I prefer pure phishing-resistant MFA methods (FIDO2, WHFB, or CBA), the support isn’t quite there yet for mobile devices (especially mobile browsers) so the MS Authenticator is the best alternative we have.

The CPU on the source used for compression is definitely the bottleneck for me. Internet is faster.

Same. 2014.

Oh I get plenty of chances to use 420. But I think you might be missing the joke. 😁

I like returning 418 instead of 404 or 403 on the files the script kiddies are hunting for on my web servers. I’m sure it does nothing but I’d like to think I’ve wasted some of their time at least once.

There are two different, and only slightly related, things here:

1. Access to company data through your phone (via Teams, Outlook, etc)
2. Using your phone as an MFA device to access company data, even on your work-issue laptop and to access browser-based SaaS apps like your payroll system.

The first absolutely can and should depend on the age of your device. MAM or MDM policies combined with Conditional Access should block older devices not receiving security updates from accessing and storing company data.

The second, assuming they are now requiring phishing-resistant MFA, only requires that you have the Microsoft Authenticator app installed (FIDO2 and CBA are alternate PRMFA methods, but more complicated to implement). The MS Authenticator is supported on Android 8.0 and above and your S8 supports Android 9.0.

So unless there is a job requirement to use your phone for email and Teams – in which case they should definitely offer a stipend or CYOD phone – you should be fine just installing the MS Authenticator app on your phone and using your work-issue laptop for email and Teams.

Edit: I just saw your other comment that they use Duo. In that case you might be hosed since it requires Android 11.0. I’d at least start by opening a ticket with the help desk and keep an email trail with your manager of what part of your job you can’t do. But they should be able to provide a method of authentication that complies with their policies.

It’s been a minute but I remember it as a panel of scientists looking down on him, almost as if in a court room. Now I definitely need to rewatch.

If I recall it’s only like 10 minutes and either no dialog or in French. But it’s easy to get the gist of it and worth a watch. And it unlocked the thought experiment about someone witnessing their own death through time travel that Terry Gilliam expertly ran with.

This is entirely from memory from a time before every Easter egg and explanation was published on the internet, and I haven’t watched it in a few years. So I could be wrong.

But I always thought >!the woman on the plane next to the red-haired man with the pre-released, pure virus about to travel around the world, is one of the doctors from the future that was sending Bruce Willis back to locate a pure sample of the virus so they could develop a cure in the future. As she introduces herself, she says she works “in insurance.” So I always took that to mean their original goal was successful. !<

Regardless I need to watch this movie again. It is easily one of my favorites and the first movie that made me realize just how amazing an actor Brad Pitt is and that he wasn’t just another pretty face in Hollywood.

I’ve always felt the protagonists win in 12 Monkeys. They say in the beginning that the virus outbreak can’t be prevented (it’s not that kind of time travel), but they needed a pure sample of the virus for the future to cure it. I don’t want to spoil anything more than I have, but the plane passenger at the end is relevant. They work in insurance.