July 10, 20241 yr Just a heads up - the posting thing is back to that thing where they take forever. Right when the soccer board is about to light up Edited July 10, 20241 yr by Captain Ron
July 10, 20241 yr 17 minutes ago, miguelito said: Is 2fa the farmer kids in high school that raise goats? That's Fightin' Texas Farmer Kids to you, Sip.
July 10, 20241 yr 10 minutes ago, Captain Ron said: Just a heads up - the posting thing is back to that thing where they take forever. Right when the soccer board is about to light up Yep, same issue here.
July 10, 20241 yr 2 hours ago, ztejas said: Google password doesn't mean shit. You need 2fa. I don’t know about yous guys, but I’ve got it up to my ears in 2fa in real life that you might as well be the power company telling me to set my thermostat at 78 degrees. I ain’t gonna do it, I’d rather inchworm have my throwaway email address and phone number for spam; everyone else already does anyways.
July 10, 20241 yr i was doing some behind the scenes upgrade work and elasticsearch was down because of that which is the slowness. it's fine now.
July 10, 20241 yr I would pay money to watch Inchworm look through whatever data he mined. At some point there has to be a "What the fuck?" moment.
July 11, 20241 yr 50 minutes ago, Macanudo said: I would pay money to watch Inchworm look through whatever data he mined. At some point there has to be a "What the fuck?" moment.
July 11, 20241 yr 55 minutes ago, Macanudo said: I would pay money to watch Inchworm look through whatever data he mined. At some point there has to be a "What the fuck?" moment. "What's a CTJ?" "What are they obsessed with cheese?" "Why is everything so 'regarded'?"
July 11, 20241 yr 1 hour ago, Hornius Emeritus said: "What's a CTJ?" "What are they obsessed with cheese?" "Why is everything so 'regarded'?" Who is South Austin and why is his mom so fucking popular?
July 11, 20241 yr 1 hour ago, Js1 said: Who is South Austin and why is his mom so fucking popular? Yeah.... she must be beautiful have many orifices.
July 11, 20241 yr 12 hours ago, farmersnotfighting said: is writing a password on paper perfect or great? no. is it less likely to be stolen than a file on your computer? yes... or probably. as long as you have a safe place for it that your wife/kids/dog can't get to it or damage it. My wife and I both work in the living room, so she could look at my passwords or simply look at me typing them in, but the bitch tends to put her teapot on the notepad I have my passwords written on so they get all smeared and shit and you can’t read them anyways, leaving me to use “p@ssw0rd1234” as my default password. Here we are on a typical day, her on her Epson couchtop, I on my Epson tablestation.
July 11, 20241 yr 10 hours ago, farmersnotfighting said: you would be horrified to see how shitty some networks are only held up by gum and rubber bands, including major companies. the real world isn't a security+/cissp textbook. I remember when Code Red and then Nimda hit and forced us to take our networks offline temporarily, and all of us still on OS/2 or who had moved to Linux were looking at the Windows users like
July 11, 20241 yr 14 hours ago, Rimbo said: please do not use lastpass 1password and bitwarden Real talk, because of past security issues? Ive tried all 3, currently paying for bitwarden, and i find lastpass usability the best. starting to migrate over apples built-in icloud keychain manager thing tho
July 11, 20241 yr 12 hours ago, farmersnotfighting said: lol. neither did fireeye/mandiant when they got hacked. neither did RSA. neither did solarwinds. neither did FUCKING MICROSOFT. i'm not saying they're good. i'm saying they're not dog shit like you're suggesting. and again, at every org, security is understaffed, always screaming for changes and being ignored by management. every single company. that's not unique to lastpass. i do this for a living. i have seen a lot of organizations. fortune 10 and small orgs. including other security companies. i can count on one hand the number of orgs i've done engagements for where i never said "what the fuck are you doing here" and none of them were the security companies. you would be horrified to see how shitty some networks are only held up by gum and rubber bands, including major companies. the real world isn't a security+/cissp textbook.
July 11, 20241 yr 17 hours ago, immamac said: Taking a nap. I'm exhausted so if your PII request is delayed that's why. The security of the internets foremost texas longhorns website all depends on the sleeping schedule of 1 guy. Sounds like the perfect presidential candidate.
July 11, 20241 yr 15 hours ago, Chooky said: What do the inchworm guys think about Terry Joseph and Blake Gideon? It's a ball-dropper.
July 11, 20241 yr 15 hours ago, runthebone said: Damn. I need to know, did I lose my ignored users? Are you seeing this post?
July 11, 20241 yr 5 hours ago, 52-80 said: 20 hours ago, Rimbo said: please do not use lastpass 1password and bitwarden Real talk, because of past security issues? Ive tried all 3, currently paying for bitwarden, and i find lastpass usability the best. starting to migrate over apples built-in icloud keychain manager thing tho It really comes down to this - when you are in the security business, it's kind of a 1 strike and you're out type business. Lastpass being hacked pretty much would be the threshold for me. Their handling since then has made it much MUCH worse. Frankly their metric isn't about usability but security and they have fallen well short of it. If you care to read more here are two things, this guys site has a lot of details on the hack, but he is not very kind on it: Their PR statement on the primary hack was torn apart here: https://palant.info/2022/12/26/whats-in-a-pr-statement-lastpass-breach-explained/ A follow-up a year later by the same guy was kind of scathing too: https://palant.info/2023/09/05/a-year-after-the-disastrous-breach-lastpass-has-not-improved/
July 11, 20241 yr 42 minutes ago, Captain Ron said: It really comes down to this - when you are in the security business, it's kind of a 1 strike and you're out type business. Lastpass being hacked pretty much would be the threshold for me. Their handling since then has made it much MUCH worse. Frankly their metric isn't about usability but security and they have fallen well short of it. If you care to read more here are two things, this guys site has a lot of details on the hack, but he is not very kind on it: Their PR statement on the primary hack was torn apart here: https://palant.info/2022/12/26/whats-in-a-pr-statement-lastpass-breach-explained/ A follow-up a year later by the same guy was kind of scathing too: https://palant.info/2023/09/05/a-year-after-the-disastrous-breach-lastpass-has-not-improved/ Pulling PII is one thing, but when the hackers OPENLY ADMIT they have source code for LP, I'm out. Delete / purge account, and on to the next best-in-class competitor.
July 11, 20241 yr It used to be if a company had an issue, they would be the place to go because it would be so over-corrective of a fix they weren’t letting whatever happen again. Now though? You have this, and worse than before, or something like Boeing, and their constant stepping on their own balls. You’d think after the Max fiasco they would be johnny on the spot, but nope. And here we are. Whatever makes the stock go up.
July 11, 20241 yr CP enjoys a monopoly. They are not concerned about customers, the customers have no choice. CP may or may not have benefited from favorable county and state shenanigans. CP doesn't give 2 shi1ts if you don't have power.
July 11, 20241 yr Anyone else's desktop version completely fucked? Mobile is fine, desktop surly is borked.
July 11, 20241 yr Quiestion for the masses: When we do have an inchworm situation, is there a place where comms are happening? Surly's twitter handle last activity was like 2021 I think, at least from my googling.
July 11, 20241 yr 11 minutes ago, Vegas64 said: Quiestion for the masses: When we do have an inchworm situation, is there a place where comms are happening? Surly's twitter handle last activity was like 2021 I think, at least from my googling. Yes. Same place it’s been since the day… https://www.reddit.com/r/emergencybackupshag/
July 11, 20241 yr 56 minutes ago, TOR said: CP enjoys a monopoly. They are not concerned about customers, the customers have no choice. CP may or may not have benefited from favorable county and state shenanigans. CP doesn't give 2 shi1ts if you don't have power. Austin Energy says HI.
July 11, 20241 yr 48 minutes ago, thunderlounge said: Yes. Same place it’s been since the day… https://www.reddit.com/r/emergencybackupshag/ Checked it when it when the site was down and there was no official communication there so the question is a valid one.
July 11, 20241 yr we have discord and twitter, I was more concerned with actioning than communication. I am gonna make some static status pages for next time.
July 11, 20241 yr 1 hour ago, Vegas64 said: Quiestion for the masses: When we do have an inchworm situation, is there a place where comms are happening? Surly's twitter handle last activity was like 2021 I think, at least from my googling. The site was down, Inchworm out front should have told ya.
July 11, 20241 yr 1 hour ago, Vegas64 said: Quiestion for the masses: When we do have an inchworm situation, is there a place where comms are happening? Surly's twitter handle last activity was like 2021 I think, at least from my googling. There were a few of us on discord, but that place is littered with old game threads which need trimmed. Edited July 11, 20241 yr by elfenix
July 11, 20241 yr Is there a 2FA option that doesn't require us to open the app on our phone then type in a code? Other accounts I have with 2FA will let me approve from the app itself, rather than entering a code. Even better ones will have a popup notification on my phone immediately after I attempt to login and I just have to swipe approval, and the best ones have trusted locations (like, if I'm sitting at my desk at home, it usually automatically approves my login (if it doesn't detect my location, I just have to swipe), but if I'm in another part of the house it doesn't...so they've got the location thing narrowed down pretty damn tight).
July 11, 20241 yr 13 minutes ago, SquishMitten said: Is there a 2FA option that doesn't require us to open the app on our phone then type in a code? Other accounts I have with 2FA will let me approve from the app itself, rather than entering a code. Even better ones will have a popup notification on my phone immediately after I attempt to login and I just have to swipe approval, and the best ones have trusted locations (like, if I'm sitting at my desk at home, it usually automatically approves my login (if it doesn't detect my location, I just have to swipe), but if I'm in another part of the house it doesn't...so they've got the location thing narrowed down pretty damn tight). I'm working on something more seamless. Security questions are a good 2FA as well for now.
July 11, 20241 yr I am not seeing any record of the giveaway drawing entries I was promised for changing my password 😑
July 11, 20241 yr I changed my password, not to password, and then I saw that my e-mail address used is way out of date and a Yahoo one I never use, and have not for many years. I tried to change the e-mail address to the only one I use and it said that e-mail address is currently being used by another person but, it is mine and I am the only one who uses that one. How can I go about changing the e-mail address?
July 11, 20241 yr we have discord and twitter, I was more concerned with actioning than communication. I am gonna make some static status pages for next time.I used to love when my managers would stand behind me at the data center racks while I was trying to fix something. “Was that light blinking before? I don’t think it was blinking before. Why is it red?” Hey man, I can either fix the problem or stand here taking to you. Which would you prefer?
July 11, 20241 yr 39 minutes ago, PittsburghTiger said: I changed my password, not to password, and then I saw that my e-mail address used is way out of date and a Yahoo one I never use, and have not for many years. I tried to change the e-mail address to the only one I use and it said that e-mail address is currently being used by another person but, it is mine and I am the only one who uses that one. How can I go about changing the e-mail address? send me an email rick@surlyhorns.com we will deal with it there.
July 11, 20241 yr 3 hours ago, thunderlounge said: Yes. Same place it’s been since the day… https://www.reddit.com/r/emergencybackupshag/ Should update it to emergencybackupsurl
July 11, 20241 yr 13 hours ago, 52-80 said: Real talk, because of past security issues? Ive tried all 3, currently paying for bitwarden, and i find lastpass usability the best. starting to migrate over apples built-in icloud keychain manager thing tho To paraphrase Mitch Hedberg, they used to have them, but they still do, too. They are to password managers what OceanGate was to submarines. There's some basic protections you need to have in place, and they didn't have them. Then they were hacked. Then they were hacked again. And both times, their response was to defend their known bad practices, rather than to do everything possible to fix them. The people running the company then are the people running the company now. I like their UI, too. But I wouldn't store anything in their system that I wouldn't want made public. So passwords are out.
July 11, 20241 yr 5 minutes ago, Rimbo said: To paraphrase Mitch Hedberg, they used to have them, but they still do, too. They are to password managers what OceanGate was to submarines. There's some basic protections you need to have in place, and they didn't have them. Then they were hacked. Then they were hacked again. And both times, their response was to defend their known bad practices, rather than to do everything possible to fix them. The people running the company then are the people running the company now. I like their UI, too. But I wouldn't store anything in their system that I wouldn't want made public. So passwords are out. MY pw was 'hotbrandywithtats001' and so far so good.
July 11, 20241 yr 9 minutes ago, Slacks said: Pretty sure I'm using a throw away.... Good luck, Big Perm.
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.