It would be unmanageable if I tried to do this without a proper tiling window manager though, I use Sway.

“I use sway BTW” 😉

Living in Germany, I get rarely get any. Usually about 1-2 per year. Last year was an exception, where the same entity (computer or very confused person) called me like 5 times before I blocked the number.

I gave out my number a lot in groups, but avoid giving it to online or delivery services.

Vast and sparsely populated. Rich, maybe a bit spoiled. Beautiful nature and landscapes. Nice, rather introverted people.

Oh, OK, that’s nice 😀 I had a huge kettle in mind for 1.5l or something

This. In the microwave, water is heated from top and sides.

In a kettle, it is heated from the bottom. With warm water rising to the top and cold water sinking to the bottom, the water will circulate to evenly distribute heat. This is the main benefit of the kettle.

Is your microwave powered by a hamster? /s

With ”there is a VPN in F-Droid", do you happen to refer to Netguard? https://lemmy.sdf.org/comment/11993547

Netguard is a FOSS Android app which kinda works like a firewall. You can allow/block network access on a per-application basis. You can limit access e.g. on WiFi or on mobile etc. It also supports blocklists, supplementing your ad blocker.

To the Android OS, Netguard acts as if it were a VPN.

Limitations:

• if you want to filter Android system services, you will break things. You will need to spend some time to do it right.
• Chaining it to another VPN is only possible via SOCKS proxy
• if you want to route some app’s traffic via VPN and others not, I think that is not possible. You could, however, manually turn off an app’s internet connection before disconnecting the VPN, if that is not too error-prone for you.

The app is very stable, I have been using it for about 5 years without problems. For most use cases it is fire-and-forget, i.e. I rarely open the app any more.

Innovation is orthogonal to code size. None of the software most modern computers are running cannot be solved on 10 year old computers. It’s just the question whether the team creating your software is plugging together gigantic pieces of bloatware or whether they actually develop a solution to a real problem.

Yeah, that’s a very useful exception.

Operator overloading is adding complexity, making code subtly harder to read. The most important lesson for code is: It should primarily be written to be easy to read by humans because if code is not trash, it will be read way more often than written.

If it is just the location, then it could be spoofed.

If it is something that requires physical presence, then you need both devices to communicate with each other. If it is not done via QR code (like some online banking do), then both devices need to be connected, e.g. via WiFi or Bluetooth. In this case, if an attacker controls one of the devices (that’s the class of attacks 2FA should prevent you from), the attacker probably controls both devices. So what’s the point then?

I guess if there is WiFi, he won’t even need a mobile data plan, so he could safe lots of money.

How would MS Authenticator make it any better than TOTP?

To break TOTP, the attacker would need to:

a) be able to observe the initial exchange of the TOTP secrets. To do that, the attacker needs access to the victim’s computer (on user level) at that specific time they set up TOTP. TOTP is a TOFU concept and thus not designed to protect against that. However, if the attacker controls the victim’s computer at that time, the victim is screwed anyways even before setting up 2FA.

b) have access to the TOTP app’s secret storage and to the victim’s login credentials (e.g. by phishing). If the attacker can gain that level of access, they would also have access to the Microsoft Authenticator’s secret storage, so there is no benefit of the Microsoft app.

On the other hand, Microsoft Authenticator is a very huge app (>100MB is huge for an authenticator app, Aegis is just 6MB, FreeOTP+ 11MB), i.e. it brings a large attack surface, especially by connecting to the internet.

I don’t think Microsoft Authenticator brings security benefits over a clean and simple TOTP implementation.

If it is just TOTP, you can use any other TOTP app, such as Aegis or FreeOTP+.

And no, Microsoft cannot be trusted on not doing anything bad. The app is full of trackers and has an excessive list of permissions it “requires”.

For comparison, Aegis and FreeOTP+ work without trackers and way less permissions.

Microsoft has a long track record of leaks. Just naming the 2 most prominent:

1. Microsoft Edge leaks every single URL to Microsoft servers (source)
2. There are lots of reports that Microsoft had their general key stolen and not even notify it for months. It is unclear who had acces to that key. This is putting anyone at risk who uses any Microsoft product. (See for example here)

Are you forced to use their app or are they just very insistently trying to trick you into using it? I.e., have you tried with Bitwarden or any other TOTP capable app?

It might depend on configuration. In the only case of Microsoft enforced 2FA I know of, it is just TOTP. Microsoft’s web interface nudges (tries to trick) you into using the MS Authenticator app, but that app is not needed. You can use any TOTP capable 2FA app, e.g. Aegis or FreeOTP+, both of which are also available through F-Droid and don’t require internet connection.

“Diplomjodler” sounds German so probably different laws apply…

With Gtk, I have seen some issues with rarely used parts of the API, but that should not be relevant to your rather simple use case.

Does she slay vampires? 😉