flak rss random

login_pushover - two factor auth with pushover

Despite my reservations about two factor auth, I decided to try implementing it. Don’t knock it til you’ve done it, right? I’ve previously played with Duo Security’s login_duo, and they have a nicely polished mobile app, but the command line tool doesn’t quite feel integrated with the rest of the system (it’s user opt-in, not admin mandated). Plus, it’s more fun to build your own. For this experiment, I picked Pushover as factor number two, which also comes with a nice app which can be used for other things as well. Now we just need some code to talk to Pushover.

more...

Posted 20 Feb 2014 06:19 by tedu Updated: 20 Feb 2014 20:41
Tagged: openbsd project security software

Facebook Zero

A more difficult challenge than Inbox Zero, but after years of effort I’ve finally achieved it. Facebook Zero. I now know everything my friends have ever done. There is nothing left to read about.

Facebook Zero

Posted 14 Feb 2014 21:38 by tedu Updated: 18 Feb 2014 07:27
Tagged: bugs rants web

comcast ping times

Despite their wonky customer service, I have generally been happy with Comcast’s technical service. Occasionally though, I have to question what in the world is going on with their network. Recently I noticed that my internet connection would alternate between working and not on roughly a two minute interval. One minute things work fine, the next minute nothing works at all, the next minute everything is fine. During the blackout minutes, making a new connection would timeout, but established ssh connections would remain up, but nothing would happen until the blackout was over. Here are a few pings I sent out (2014-02-13).

more...

Posted 13 Feb 2014 21:49 by tedu Updated: 25 Jun 2015 17:56
Tagged: bugs network rants

the finitely probable machine

The February 17th 2014 issue of Time magazine, with the Infinity Machine on the cover.

more...

Posted 11 Feb 2014 02:16 by tedu Updated: 10 Oct 2014 00:32
Tagged: computers magreview

banned parameters

I was reviewing the flak logs the other day (chasing an unrelated issue) when I noticed lots of requests with additional parameters, like utm_campaign=twitter. Huh? I’m not running any campaigns. GTFO.

I find these tracker tags in URLs annoying when other sites do it. It’s not the tracking that bothers me, but the fact that the URLs end up being long and ugly, and it means there’s several URLs for the same content. I much prefer canonical URLS. Different tracking URLs break duplicate detection on various link sharing sites, and trick the browser’s history feature. Boo.

Of course, it’s your site, you do what you want, but this is my site, so don’t dick with my URLs. To that end, flak now filters out extraneous parameters by driving you through a bounce screen. Hopefully this prevents the further sharing and posting of the infected URLs.

Try it out.

Posted 27 Jan 2014 01:11 by tedu Updated: 19 Jul 2015 22:08
Tagged: flak rants web

new gold standard for useless mobile site

I usually check the weather using the builtin default app on my iPhone. It works well enough to tell me the important things, like hot or cold, raining or not raining, with a minimum of fuss. Sometimes I check the weather on my desktop, for which I’ve recently been using the forecast.io website. It has a clean design jarring distractions, people on the web tubes say it’s cool, and best of all, they’re based in the Indian Ocean.

more...

Posted 26 Jan 2014 19:28 by tedu Updated: 22 Feb 2014 00:40
Tagged: rants web

OpenBSD on BeagleBone Black

Everything I wish I knew before installing the newly renamed armv7 port on a BeagleBone Black.

more...

Posted 25 Jan 2014 17:41 by tedu Updated: 07 Aug 2014 12:10
Tagged: gadget openbsd

better older days

Do you miss the good old days? So does the Feb 1 The Atlantic.

more...

Posted 23 Jan 2014 00:48 by tedu Updated: 03 Jun 2014 03:42
Tagged: language magreview

super bowl squares

Get excited, the Super Bowl is coming, which means Super Bowl Squares are coming! It’s time to start thinking about the value of each cell in the square. You can let players pick cells, but it’s more fun to randomly assign them. That still allows trading cell for the skill player, but doesn’t leave a hobbled 2-2 cell lying around for some sucker to pick. Either way, it’s good to know the expected value of each cell.

more...

Posted 17 Jan 2014 04:43 by tedu Updated: 10 Oct 2014 00:34
Tagged: math programming sports

rethinking two factor auth

Consider this a thought experiment. No hard recommendations.

more...

Posted 11 Jan 2014 20:21 by tedu Updated: 06 Jun 2016 00:51
Tagged: security thoughts web