• 0 Posts
  • 20 Comments
Joined 1 year ago
cake
Cake day: June 3rd, 2023

help-circle


  • Rule 41 of the internet - there’s always a relevant XKCD comic.

    I’m not sure that the maths in it is correct - I know there’s some criticism of that in particular example but I think it holds up as long as you make it long enough and don’t just use common short words or common phrases. Its also bad if there’s a pattern to your passphrases e.g. only using colours, or sports team mascots, or all words of the same length, etc

    And where possible use MFA (unless it’s SMS based, then I wouldn’t bother - I suspect when businesses offer that they just want to collect your phone number and don’t care about security).


  • Just a slight correction - the old recommendation of using random chars, numbers, and symbols is no longer best practice as it causes more issues than it solves. New best practice is use long passphrase with minimum 16 characters but I’d recommend minimum 24 for future proofing. That sounds like a lot but “mary-had-a-little-lamb” is 22 chars and not hard to remember or type. Obviously don’t use exactly that password (since it’s mine & passwords should be unique 😉)




  • SSO allows users to use a single set of credentials to access multiple systems within a single organization (a single domain)

    Instead having a seperate login for a website or an app you (or whoever) set up an SSO connection between the service provider’s SSO platform and your SSO platform aka IdP. When trying to log into that website or app it redirects you to authenticate with your SSO platform. This way you sign in with your IdP (e.g. Azure, Ping, Okta, etc) credentials instead of having a seperate set of credentials for each site. If you’ve already logged into your IdP recently the site your logging into can detect that and you won’t need to enter your password.

    I believe the above example would be federated SSO because it’s between your organisation and one or more other organisations or vendors.

    Email is the most common but it can be lots of things (depending on what SSO platforms being used and how they are configured).


  • It’s still possible to prevent you wiping the phone with the sim in. Admittedly that would work most of the time but all that’s needed to change that is a someone watching the right YouTube videos and spreading the word.

    If your phone is encrypted and has the correct security settings then your data isn’t vulnerable. Unless it’s a government agency or something like an APT. If that’s the case there’s little you can do besides not keeping any valuable data on it.

    It’s unlikely they care about your data though. Not unless you’re wealthy enough to be bribed. The main concern for them is getting caught by tracking, depending on how much law enforcement cares.

    What makes you think I’m angry?



  • Ack that you just don’t know.

    In answer to your question, yes. Other NATO countries will go to war if any NATO country is attacked.

    Think about it… are you willing to stand by and embolden a country by doing nothing when they nuke another? Any country that would be willing to nuke another over being called out for involvement in assassination is one that needs to be neutralized immediately to remove that nuclear threat.

    By your very logic, if they are willing to nuke over nothing, they’ll also do it to countries that sanction them. Just because you wouldn’t help your friends in a fight or if they got attacked doesn’t mean everyone is the same as you and just watch while it happens doing nothing. Think about it…


  • You keep asking people for proof but yet you provide none for your claims.

    You’re focusing (obsessing) about the wrong thing - you made up your mind as to what you think the solution is before you even asked the question and your rejecting the right answers because they don’t confirm to the answer you want to hear.

    If someone steals your phone, it’s gone. “Locking” the sim card slot will not prevent this. Make your peace with that.

    Sim card in or out, phones can be turned off. If the problem is as ubiquitous in your country as you suggest, law enforcement doesn’t even care that if they didn’t turn off the phone it does not matter. If law enforcement does care, they’ll start using other techniques (Faraday bags) as soon as people start getting jail time. Despite your assertion otherwise, not all criminals are dumb and the ones that are, are still smart enough to copy the ones that aren’t.

    You won’t be able to track them, you won’t get justice, the thief’s will make money, the world will continue to rotate just the same. Try addressing the problem elsewhere.



  • Either they apply to rejoin and go through the exact same process as every other country that wants to join has to (with no special treatment based on being a member previously), then meet the requirements and follow the rules already in place OR they remain non-EU members.

    Why have any rules if you’re going to make exceptions for a country that just wants all the benefits of being member but not contribute towards the benefits. Makes a farse of the entire purpose of the EU if anything like this goes ahead.