My favorite is that everyone sends you a silly preview saying “we’ll have your stats soon”.

Just send one.

Yep, documentation and a good base level default installation configuration/guide with minimal friction.

I’m perfectly willing to play around once I know at the basic level that the core flow is going to work for me. If it takes me digging through a stack of documentation (especially if it’s bad) to even get something to experiment with on my own system? I won’t bother.

Yes, it is?

Your rant doesn’t make sense. Asking for suggestions because you’re not OK with being spied on (especially when you’re perfectly willing to absorb the hosting costs yourself or pay for a service that isn’t hostile) is perfectly valid behavior.

I thought the finale was really cool.

Beautiful username for this post.

There is no actual logic to having time windows to access confiscated devices that are not ever going to be returned. Anything that’s not technology is completely unaffected by that silliness.

There’s no world where a legally confiscated physical object is held to the same standard.

I don’t see the issue here.

The seizure of the devices happened with appropriate warrants, the actual search was done with appropriate warrants, there’s apparently some weird time limit on the search warrant on a seized device, and some of the maintenance involved took place outside that weird time restriction.

The actual hacking of the device and the actual search of the contents of the device were with a warrant.

lol throw a colon after TIL and it’s good enough.

I could get the “default” to facilitate setup, but as far as I’m concerned it’s seriously fucked not to have the first step of your script be replacing it with the user’s own choices. It’s really hard for me to trust the security as a whole of a project that does that by default, especially because it’s intended to be for inexperienced users and there was no indication during the setup process or other included information that that was the case.

Serious question: last I looked at casaOS (because I liked the hardware), they had SSH open and accessible to default passwords by default. This scared me off hard.

Is this still a thing/are there other glaring security holes?

He wants all of his books in one index.

Leaked how? No good practice allows any way for a password to “leak”.

What rotating passwords does is ensure people who don’t use a password manager either write their password down more and more frequently, or use a weaker password with some simple changing pattern that doesn’t add anything.

Changing passwords is almost always completely useless, and requiring it dramatically weakens security.

If you’re scared about Microsoft tracking your UX engagement on a website, the best way to make sure your sex life stays private is to file it in federal court.