mik

joined 2 years ago
[โ€“] mik@sh.itjust.works 2 points 1 month ago

It's worth mentioning Paperless Mobile is now v4 with the last update being posted 5 days ago!

[โ€“] mik@sh.itjust.works 3 points 2 months ago

I'm not sure if you're asking if it is better to use the same password with 2fa, or questioning a claim that it is (which I didn't see in the article). If it's the first, no it is not better to re-use a password with 2FA.

2FA is meant to prevent someone from accessing the account if they only have your password. The problem with re-use is they can attempt that same password on other services, which may or may not support 2FA, or may have flaws in their 2FA implementation.

Also, many services will "give away" that the attacker has the right password by reacting differently if they enter the wrong password vs the right one, such as only showing the 2FA prompt if they have the right password.

Using unique passwords AND 2FA is far better, as it means an attacker must start from scratch for every service they wish to attack, and still requires compromise of your 2FA device in addition to finding out your password.

[โ€“] mik@sh.itjust.works 7 points 2 months ago* (last edited 2 months ago)

Matrix itself isn't a thing, Matrix is a spec/protocol. Synapse and continuwuity are implementations of the server, with synapse being the "reference implementation." Client apps like Element (the reference client) would be good to have there, but I'm not sure selfh.st will want to list clients because there is quite a few.

[โ€“] mik@sh.itjust.works 11 points 2 months ago

I get the impression they meant AI as in general "Artificial Intelligence", rather than the buzzword AI used to describe LLMs.

[โ€“] mik@sh.itjust.works 1 points 3 months ago

CA unreachable means no renewals, but identity verification (login) is offline. As long as certs renewed fine, connection to the CA is not needed.

[โ€“] mik@sh.itjust.works 18 points 4 months ago

Totally worth mentioning, some LG OLED TVs are able to be jailbroken and run homebrew software!

https://www.webosbrew.org/

It can block firmware updates and telemetry, so no spying and no surprise "feature" additions.

[โ€“] mik@sh.itjust.works 2 points 7 months ago

@wesker@lemmy.sdf.org if it helps, the Symfonium dev is open to de-googled licensing via Ko-Fi donations. See the forum post here: https://support.symfonium.app/t/how-can-i-pay-for-symfonium-without-google-play

Per Tolriq's responses there, you can get the APK safely from the Aurora Store.

 

Coming from Sync for Lemmy, a feature I am missing is the ability to prompt for a pin or biometric check when switching into a particular account, or opening the app to that account.

This would be useful to protect more sensitive accounts, especially if it can also hide the protected accounts details on the account switcher, perhaps with a custom account display name local to the app?

[โ€“] mik@sh.itjust.works 2 points 11 months ago

It probably would be easier to just write an "update Caddy" script. They don't release updates very often, except for security fixes, so it's not much effort to do manually. I automated mine with Forgejo Actions, you could do the same with GitHub actions as a free option for example. Lots of neat ways to accomplish this!

[โ€“] mik@sh.itjust.works 2 points 11 months ago (4 children)

Xcaddy is a build tool. Caddy plugins are built into Caddy itself for optimization purposes, so xcaddy essentially makes you a custom version of Caddy. It only conflicts with Caddy so much as building a new version would conflict with the old version. You still get a normal "Caddy" executable after running xcaddy, just replace your existing Caddy with the new one created by xcaddy!