• 0 Posts
  • 23 Comments
Joined 10 months ago
cake
Cake day: August 23rd, 2023

help-circle
  • It’s a circus out there…

    One of my financial institutions supports yubikeys, but does not have the option to turn off sms 2fa. A chain is as strong as the weakest link, as usual.

    Another only has sms 2fa and bizarrely allows me to specify any phone number at login time to receive the code. WTF?

    Most only have 2fa via sms. When you talk about using an authenticator app people bitch and moan because they have to cut and paste those digits into the login page. Oh, the humanity…

    Don’t even get me started on sites with “roll your own” schemes, like forcing you to install their app (which requires all permissions under the sun) just to accept a push message and allow you to login on their website.









  • You can get nice mechanical keyboards these days. They’re not cheap though

    Back in 2004 the company we worked at (we worked for another company who provided tech contract work for them) was bought and they were dismantling a particular site. I remember getting to the e-trash dumpster and finding boxes of almost new computers and HP keyboards. I had a truck so I grabbed them all. The computers, I donated. The keyboards I still have maybe 3 or 4, after having given others to friends and family.












  • I like tailscale and have been testing it for a few months. I’m also using headscale as the control plane.

    Unfortunately the android client is somewhat unreliable. It works most of the time but once in a while, connections to your tailnet will fail for a bit and require retries. If you ping a machine in your tailnet during this problem, it will show packet loss and then start working after a few pings. This unfortunately makes it difficult to have a reliable split DNS setup.

    I’ve done everything to try and understand what happens without success. It seems like state is lost somewhere and a few packets flowing will fix it. Running a constant ping from Android to my tailnet “fixes” the problem, but is not a great workaround.

    Just something to keep in mind before you jump headfirst.