Today on a mailing list I frequent someone accused the Australian Government’s MyHR (“MyHealthRecord”) system of being designed for the bureaucrats, not to further patients’ interests. Another person responded, saying that it was wrong to accuse people of deliberately designing the system that way. Strangely enough I agree with both of them – but the former more than the latter.
Thunderbird in Linux, for some reason, still does not understand GIO filesystems. If you have a network location connected in your file manager (such as Nautilus) you can browse around, copy files and so on – but Thunderbird cannot see those locations. In particular, it can’t attach files out of those locations, not can it save attachments to those locations. Luckily,
gvfs provides a workaround.
As someone with administrator responsibilities on several AWS accounts, I have MFA (multi-factor authentication) enabled for lots of AWS identities – IAM users and root users. I use a virtual MFA device – i.e., a mobile phone running Google Authenticator. The QR codes that AWS displays when activating MFA have some irritating properties…
Way back in 2003, I bought a ThinkPad T30. Yesterday, July 10 2017, I turned it off for probably the last time.
If you use AWS, you probably have a root user and one or more administrator users. If you are following best practice you have secured all logins with MFA, and you rarely if ever use the root user. Instead, you log in as one of the administrator users. The problem with that is that as long as you are logged in, you can do anything – including make disastrous mistakes. Wouldn’t it be nice to have all the power of an administrator at your fingertips, but only when you actually need it?
The online world has become too dangerous for us to keep protecting ourselves with no more than a username and a password. Especially when most of us choose stupidly simple passwords. Even if you choose a good one – upper and lower case, special characters, letters and numbers – you now need such a long one that no human can remember it. Tools like LastPass are great, but only if you also use ridiculously long passwords. Pretty much the best protection you can give yourself is a simple thing called two factor authentication. It’s simple, it’s free, and it’s very effective.
The matter of data centre security was raised recently on a network mailing list I subscribe to. Someone was wondering if data centres checked incoming equipment for “bad stuff” – explosives and what-not.
The reaction from some was “don’t talk about that, we don’t want to give people ideas”. What a muddle-headed response!
The situation: You have a computer with no wifi, and you have an access point. No wifi, so no Internet. Sad face. But if you have a MikroTik router with a wifi interface and a couple of Ethernet interfaces, you can set up a private Ethernet network and connect your computer to wifi through the MikroTik.
ssh is just about the most secure way you can provide access to a system. But even ssh is subject to attacks. You can reduce the likelihood of a breach even further with a few fairly simple steps. The specifics below are for Ubuntu 16.04, but the principles are the same for any modern Unix.