• 0 Posts
  • 47 Comments
Joined 2 years ago
cake
Cake day: July 3rd, 2023

help-circle
  • It took me 7 years to get a 2 year degree. I work with one of my best friends who got his masters in that same time. We’re both successful and excell at what we do. It does suck that you have to wait to be done, but one silver lining is you may have a better job market since you won’t be graduating with the vast majority of college students competing for the same spots.



  • If my personal laptop is stolen, my drive encryption will protect my data. Without that, physical access is enough to pull info unencrypted. A user password will prevent OS access both locally and remote. If someone happens to get my password or bypasses my login somehow, I don’t want them to be able to open my email and read messages, or open a browser, go to a logged in Amazon page, and be able to order items. I personally don’t keep anything logged in and everything logs out when my browser is closed. It’s inconvenient, but to the tune of an extra minute each day to login to everything.

    Really, you just have to decide your risk tolerance. Businesses have a lot at stake and therefore it behooves them to force strict auth policies. If you aren’t concerned about your personal stuff, set a login password if you want, and put your creds in browser, but I’d urge to at least use a password keeper over a browser.



  • I’m gonna have to disagree even though it is an annoying process listed above.

    In this case there was a drive encryption password to prevent data theft if the device is stolen, OS login for user level access, a password keeper login at the application level, and MFA on a different app. That is 5 different auths (drive, os, pw keeper, email, MFA) for 5 unassociated objects managed by potentially 5 different entities. The only reason this was an issue was the dead phone for MFA, which is a user error. It super sucks that this is best practice because of bad actors, but this is baseline auth.

    I am curious how you would do this differently though if you’ve got ideas. In this case, assuming the OS is Windows and email is Outlook, this could have all been handled with SSO, which would have only required the first two passwords, which is my daily work experience. However, I then get into Bitwarden and log into any not SSO apps I need and have MFA configured for all that support. I work remote a lot and my company is looking at an always VPN connection for everything. That would require me to go through another level or two of auth.



  • I was a carry-out at my local hardware store for a few years in college. I brought carts in from the corrals and helped people load heavy stuff. I’ve seen and been victim to the damage caused when a rogue cart catches the wind and fucks off down the parking lot. People that leave their cart not in a corral or inside disgust me more than more most lazy people.

    You’re my hero, dude.














  • I learned on automatic but got a manual about 5 years ago. This past November I went on a trip with friends and we were able to rent a manual car for cheaper because I could drive one and it was the norm in the country we were in. Nice skill to have, but not required. I’d learn manual if you have the option.