• 0 Posts
  • 24 Comments
Joined 1 year ago
cake
Cake day: June 19th, 2023

help-circle
  • Corporate cuts should always start with the greatest fat that does the least work - the ones at the top.

    Because if the company has found itself in a place where headcount needs to be reduced, these are the people who led it there and deserve all of the blame for hurting the company to that degree. Plus, you should always start cutting where you get the lowest volume of productive work for the greatest money spent, and that is always at the top.



  • I have a tube-based distribution system from the second-floor window that I started using during COVID to keep my distance from those plague incubators that came calling, and just never stopped using it.

    I live in a moderately cold climate, and Halloween evening nearly always drops to around -5℃ to 5℃. So it’s much nicer to just sit in a cushy armchair by the window with a warm blanket over my legs and drop candy through the tube. A surprising amount of adults, teens, and tweens are tickled pink by that system, although a lot of little kids need a surprising amount of direction to get their candy.

    And yes, I always drop either two pieces or - for those in dark hoods and carrying scythes - full-sized snickers.






  • 16 characters was the minimum length a password should be due to how easy it was to crack… something like a decade ago.

    Now it’s something like 20 to 24 characters.

    Seriously, if your company is defining maximum password length and demanding specific content, it is failing at the security game. Have the storage location accept a hashed UTF-8 string of at least 4096 bytes - or nvarchar(max) if it’s a database field - and do a bitwise complexity calculation on the raw password as your only “minimum value” requirement.

    Look at how KeePass calculates password complexity, and replicate that for whatever interface you are using. Ensure that it is reasonable, such as 150-200bit complexity, and let users choose whatever they want to achieve that complexity.


  • rekabis@lemmy.catoLinux@lemmy.mlProjects To Watch Out For: Ladybird Browser
    link
    fedilink
    arrow-up
    19
    arrow-down
    6
    ·
    edit-2
    3 months ago

    We don’t have anyone actively working on Windows support, and there are considerable changes required to make it work well outside a Unix-like environment.

    We would like to do Windows eventually, but it’s not a priority at the moment.

    This is how you make “critical mass” adoption that much more difficult.

    As much as I love Linux, if you are creating a program to be used by everyone and anyone, you achieve adoption inertia and public consciousness penetration by focusing on the largest platform first. And at 72% market share, that would be Windows.

    I hope this initiative works. I really do. But intentionally ignoring three-quarters of the market is tantamount to breaking at least one leg before the starting gate even opens. This browser is likely to be relegated to being a highly niche and special-interest-only browser with minuscule adoption numbers, which means it will be virtually ignored by web developers and web policy makers.


  • His router is tri-band though meaning it has 2 5ghz transceivers.

    Unfortunately, for many models - like the Linksys WRT 3200ACM - that second antenna (technically the third one if you include the 2.4Ghz one) doesn’t function at all without the manufacturer’s firmware. It’s a dead stick with any third-party firmware, and is 100% software-enabled.

    I have found this fact to be reliable whether it is DD-WRT or OpenWRT, and across several different manufacturers including Asus and D-Link.



  • Meanwhile in Western society, 40% don’t believe in evolution, flat-earthism and “birds are drones” have moved from silly jokes into serious movements, and a significant minority of people think that COVID was a hoax and the vaccines were made to implant mind-control chips.

    No wonder China has surged ahead… even an authoritarian state can easily leapfrog a society crippled by anti-intellectualism, alternative facts, and cultivated ignorance.


  • I am also supremely space-constrained, but I also had no need to take my development device away from my desk. So I got a workstation and a KVM to switch between workstations, thereby needing only one keyboard, mouse, and set of monitors for multiple computers.

    I went further than that, because I also needed to keep the desktop largely clear and the floor space used down to an absolute minimum. So I got a 60s “tanker desk”, and put a smaller office table on top of it. the computers all sit on top of the office table, up near the ceiling (and away from a lot of the dust!) and the monitors and KVM dangle down from beneath it. This leaves only the two pedestal legs of that office table and my keyboard and mouse as the only things “on” the top surface of my desk.

    And ignoring the chair, I can have four workstations and six monitors within a 30×60 inch footprint (the tanker desk).








  • Fail2ban bans after 1 attempt for a year.

    Fail2ban yes; one year, however, is IMO a bit excessive.

    Most ISP IP assignments do tend to linger - even with DHCP the same IP will be re-assigned to the same gateway router for quite a number of sequential times - but most IPs do eventually change within a few months. I personally use 3 months as a happy medium for any blacklist I run. Most dynamic IPs don’t last this long, almost all attackers will rotate through IPs pretty quickly anyhow, and if you run a public service (website, etc.), blocking for an entire year may inadvertently catch legitimate visitors.

    Plus, you also have to consider the load such a large blocklist will have on your system, if most entries no longer represent legitimate threat actors, you’ll only bog down your system by keeping them in there.

    Fail2ban can be configured to allow initial issues to cycle back out quicker, while blocking known repeat offenders for a much longer time period. This is useful in keeping block lists shorter and less resource-intensive to parse.