Sam Howell @syntax@social.privacytools.io

@thenewoil
I can really relate to everything you mention in this post. It's like reading my own story. I had an especially similar moment recently when asked by my work to give feedback about our home working, in which I proposed all home workers start using the company #VPN. I don't expect much will come of it but I also trust our IT's decision.

@nikolal I expect this also means the gov will always be reluctant to take action against #Amazon. They're in bed with them essentially (consider #Ring's relationship with police etc.)

I've finally figured out the #CLI #ykman tool for managing my #Yubikey credentials. It works nicely and I've also managed to set up a challenge-response key for use with #KeePassXC.

#2FA #MFA #security #passwords #keepass #Linux #Debian #commandline #terminal

Someone please explain how I can manage my OTPs with the Yubikey Authenticator 'ykman' #CLI tool (now that there is a bug in the #GUI preventing normal launch. The CLI is confusing me. It says (correctly) I have slot 1 programmed on my key (multiple 2FA creds for various sites), but I can't see any way of listing or using them.

#yubikey #yubico #2fa #u2f #totp #hardwaretoken #passwords

@1ll173r47
Yeah I figure it's doable. May not even get the damned thing (partner wants it), but if we do I want to know I can keep an eye on what it's doing.

If I were to have an in-home display for a #smartmeter installed, which had to be connected to my home #network, but claims to not access the internet, how could I verify this at the #router level?

Currently I have a guest network available which is blocked from having access to the #LAN. I suppose I could connect the display to this network and also block access to the internet...

@dsfgs
#Tor is designed for #anonymity and I trust it completely. I advocate for #FOSS and run a couple of Tor relays. Some further reading:
https://support.torproject.org/https/https-1/
https://tails.boum.org/doc/about/warning/index.en.html#exit_node

The key point here being that the exit node itself doesn't offer a layer of encryption, so the user must be using HTTPS, otherwise packet capturing is a very real threat.

@dsfgs
True, there's overlap. However, Tor/I2P certainly doesn't automatically equal security. I seriously doubt a company sharing sensitive files and communications over Tor is a good idea, not being able to ascertain exit nodes etc. Members of a company don't want/need to be anonymous when communicating with each other, it would be counterintuitive.
@hopeless

@dsfgs
They're anonymity networks, not VPNs, but thanks for the feedback.
@hopeless

@hopeless
Thanks for the feedback 👍

I'm taking part in a #homeworking survey for my company, and one of my recommendations is for home workers to be on the company #VPN (connected to our NAS) because our home network #security can't be guaranteed, we have to rely on storing data on a proprietary cloud storage site etc.

Please share your suggested arguments for (or against) VPN for all home workers.

@self
I also run an XMPP server with e2e encryption feature, but never managed to get other people interested enough in it.

@splinear@nova.community
Currently I'm running 'nmcli general hostname' to change it, which seems to do the trick. I'm using nmcli for all the networking changes. Just need to figure out if I can have my password in a file rather than have it in the script ('nmcli connect <BSSID> password <password>'). Failing that I suppose I could pass it as a silent argument.