ZeDoTelhado

joined 8 months ago
[–] ZeDoTelhado@lemmy.world 2 points 1 week ago

i miss the nonsense autocomplete posts. still remember the one about hitler stealing nutella, and the one about americans thinking obama is a cactus

[–] ZeDoTelhado@lemmy.world 2 points 3 weeks ago

Mooltipass looks sick actually. I have my reservations regarding the ble part, but I would have to look into it more to understand it. Might get one to check around how well it works (once availability is there)

[–] ZeDoTelhado@lemmy.world 2 points 4 weeks ago (2 children)

Curiously enough, I never heard of those. Do you happen to know good ones so I can further check?

[–] ZeDoTelhado@lemmy.world 4 points 4 weeks ago* (last edited 4 weeks ago)

Do you want to know the kicker? There are banks (yes, you heard me right) that straight up don't allow more than 20 chars. 20!!! And they say you got to use the app for X things because it's secure and shit (e.g.: use the app to 2FA credit card transactions). Meanwhile, does not allow you to add a yubikey for Fido authentication

[–] ZeDoTelhado@lemmy.world 14 points 1 month ago (1 children)

That's how i want my canisters: with good posture

[–] ZeDoTelhado@lemmy.world 7 points 2 months ago

I am not sure if by any chance they do the extra mile to check on that. However, as a rule of thumb you should try to keep private stuff away from work stuff, meaning, at work maybe is not the best idea to boast about your reddit profile where you happen to follow some nsfw stuff (or other stuff that can be considered offensive and/or can lead to controversy). I would imagine they try to check things such as accounts attached to an email or phone number (for instance). If a set of aliases were used for this (or different info) from your work email phone etc., you should be able to keep it separate.

[–] ZeDoTelhado@lemmy.world 0 points 4 months ago* (last edited 4 months ago) (1 children)

I was making a quick check, and yes, the DoH situation is a bit more dicey. From how I see it, the best way to make this work is to, at the firewall level, either block as much as possible any requests that look like DoH (and hope whatever was using that falls back to regular DNS calls) or setup a local DoH server to resolve those queries (although I am not sure if it is possible to fully redirect those). In that sense, pihole can't really do much against DoH on its own

EDIT: decided to look a bit further on the router level, and for pfsense at least this is one way to do this recipe for DNS block and redirect

[–] ZeDoTelhado@lemmy.world 0 points 4 months ago (6 children)

Pi hole is an amazing tool and gives a lot of insight on what is being queried and blocked against the block lists. Also, makes completely transparent on the entire network to have nasty things blocked. One thing I will mention to make the setup better: make sure on the firewall level you can have a rule that makes every request for a DNS to go through pi hole. Some devices will use a hard coded DNS instead of respecting the one on the network

[–] ZeDoTelhado@lemmy.world 0 points 4 months ago (6 children)

The biggest problem with this approach is basically Facebook saying that you have to pay for a right, meaning, if the law tells you that you can, and should, always have a say if you are followed around or not, you mist have that capability. What Facebook is doing is put a right behind a paywall, which is absurd