u/IllustratorSafe4704

I have seen this type of question, but I don't really understand how the technology works, so I want some clarification. Im OK with buying the yk5 if its what I need, but since im planning on buying 3 (one for me, one in safe, one in some remote location), so If I can save my money, I'll do that.

My main goal: Take my ssh keys and put them on the yk (Or create new ones on the key), so that not only do I not have to worry about my keys being stolen (so long as the yk is unplugged its inaccessible to hackers), but I also want something portable. If I don't have my laptop on hand, but I do have access to a linux PC (that I can be reasonably sure is not compromised with malware), then I can plug my yk into that pc and use ssh on that PC, preferably without needing to modify that PC at all. Then I can unplug the key and go about my business.

I like the way SIM cards work, where the Secret key is on the security chip and never ever leaves the device, and instead you can use the device to encrypt and decrypt traffic without ever touching the secret key.

From what Ive seen on YT this can be done with FIDO2, but talking on discord It seems like I need PIV? Im confused because I dont know how these technologies interact. Hopefully this isnt just gibberish :P

I switched the home router over to OPNsnese because our old router diddn't have the features I needed, mainly ipv6. But now whenever something goes wrong with the wifi its "your so stupid why cant you fix this" and "god f***ing dammit why is your stupid sh*t breaking my stuff again". Recently they have threatened to come downstairs and start cutting things until it works. I'm sick and tired of being treated like I'm some sort of Evil villain just because I want ipv6 on my own separate interfaces.

I had an Idea though. Currently all my devices are on their own subnet, So it feels like I should be able to use both the new and old routers in conjunction. My thought Process is that they would be both connected to WAN, and the OPNsense router get an ipv6 prefix and our old router gets an ipv4 prefix. Then I run NAT64 to allow devices on my interfaces to have access to the ipv4 internet. Does anyone know if this is achievable?

furthermore, My parents are upset that I haven't given them the login to the router. Since none of them are tech-inclined, I'm worried that there going to break more stuff. Does anyone have resources to help me make multiple accounts

I recently have gotten ipv6 enabled network wide and have proper firewall configs thanks to OPNsense. Now I want to allow all traffic to port 22 to/from any interface. This way I can SSH to all my computers. from anywhere. Same hostnames, no weird host-jumping, just my trusty domains.

Ive been told this is a bad idea, but I think I can mitigate the security issues. here is my to-do list before I enable the allow rule

1. Ensure sure PermitRootLogin prohibit-password and PasswordAuthentication no is set everywhere
2. Devices that cannot do the above, or use weak encryption, should be excluded from the firewall or restricted to a ULA.
3. Ensure ~/.ssh/authorized_keys is set how I expect it
4. remain up-to-date on all devices, within the last month
5. fail2ban/croudsec on all devices

On one hand this seems like Im just asking for one lucky bot to wreak havoc on my network, but then again people port-forward ssh all the time without issue. Can I be trusted with the router password? Is this not that bad and I'm just overreacting?

Edit: I used firewall and port-forward interchangeably. my bad :P

Im trying to disable the timezone while keeping RFP. This is what I have so far:

defaultPref("privacy.fingerprintingProtection", true);
defaultPref("privacy.fingerprintingProtection.overrides", "+AllTargets,-JSDateTimeUTC");
defaultPref("privacy.resistFingerprinting.letterboxing", true);

but my timezone is still set to GMT via JS DateTimeFormat().

I only want to change it on some websites. But Im not going to install an entire seperate browser just to make dr appts. But It seems You can't Disable RFP per-website.

I have a very small collection of landline phone but they are mostly non-functional right now As I do not have a landline service. Ive wanted to make something that allows me to provide functionality, so that you can hear them ring, dial and call services. Calling other phones on the network is what im mainly worried about, but I may try to set up external calls to the public telephone exchange.

I have come up With countless ways to do this, including building my own phone exchange, but one that has shown the most promise is the Cisco VG series. I can find VG3xx series devices for dirt cheap on ebay. They have 24 ports, which is way more than I need, as well as they support pulse dialing. I have yet to find other devices that support pulse dialing.

The only reason I'm heasident to just buy one of the VG310 s, is that It is not a stand alone devices and seems to need a voip server. I have seen people say running a voip server is anywhere between "not that bad" to "worse than ceph".

Also, if there are any options that allow me to control the phones with my own software, that would be Ideal, As I can come up with my own gateway system.

Im moving to IPv6 - mostly everything in the homelab to save me the headache of NAT. Ive moved my proxmox nodes to their own ULA, however Im still having some issues. I don't know if this is the right sub for this but If not, Please let me know where to post this.

My ULA is given out by the router to each PVE node, and they made their own EUI-64 address. I have disabled temporary addresses as well as I dont see a need for them to exist. Here is the config and the IP addrs, though I have deleted a lot of the output that was irreverent

root@iMac12-2:~# cat /etc/network/interfaces
auto vmbr0
iface vmbr0 inet manual
	bridge-ports nic0
	bridge-stp off
	bridge-fd 0
	bridge-vlan-aware yes
	bridge-vids 2-4094

auto vmbr0.20
iface vmbr0.20 inet manual

root@iMac12-2:~# ip a
7: vmbr0.20@vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 3c:07:54:60:bc:38 brd ff:ff:ff:ff:ff:ff
    inet6 2600:4040:2b01:d220:3e07:54ff:fe60:bc38/64 scope global dynamic mngtmpaddr proto kernel_ra
       valid_lft 86233sec preferred_lft 14233sec
    inet6 fd2e:2bae:6374:20:3e07:54ff:fe60:bc38/64 scope global dynamic mngtmpaddr proto kernel_ra
       valid_lft 86233sec preferred_lft 14233sec
    inet6 fe80::3e07:54ff:fe60:bc38/64 scope link proto kernel_ll
       valid_lft forever preferred_lft forever
root@iMac12-2:~#

My worry is the following: 1. Chatgpt was telling me not to use EUI-64 even on servers, And I dont know if I should listen to it or not. 2. When the router inevitably dies because I messed it up or something, How do I ensure that all nodes keep their ULA? I dont want the whole cluster falling apart.

EDIT: To be clear, Im talking about what happens while the router is offline. I know that everything will work again once the router comes back online, but during the outage, the proxmox nodes will not be able to communicate.

Oh, yeah and my router is virtualised on the very proxmox nodes that could go offline. Prob should have mentioned that.

Hello! i am buying a surface for undergrad college. I decided to go with a surface since ive been taking lots of handwritten notes and trying to go paperless at the same time. I also like doing handwritten homework and printing it out before i give it to my teacher.

My parents are paying for it so i don't really care about spending more if it means better performance, but i also don't want to throw my parents money around

I had been looking at the MS surface andwas planning to buy the surface 10 (because im a linux user and the 11 does not have good support on linux) but felt disappointed by two things:

for the same price, i can buy a laptop with 32Gb of ram, a core ultra 7 processor and a discreet (albeit ARC) gpu. the surface honestly feels like a downgrade with 16Gb and and a crummy igpu.

Its not like I'm builng a surface for its compute performance, but i feel like Im missing out on a lot of performance for the same amount compute power just to have (albeit very good) stylus support.

Lastly, if anyone can tell me what its like with the lack of USB ports, I think it might be annoying to have to deal with dongle hell

Hello! I am looking for a new laptop (to replace my lenovo 300e 2nd gen, which has clearly been engineered to last exactly 4 years)

I have compiled a list of features I want to see from a laptop as I go into college. I have researched a few options, but Id like to hear from others.

• Total budget (in local currency) and country of purchase. Please do not use USD unless purchasing in the US:

$0 - $1000 I will likely narrow this down later which is why I'm still in the research stage. I can use student discounts if they exist.

• Are you open to refurbs/used?

Absolutely

• How would you prioritize form factor (ultrabook, 2-in-1, etc.), build quality, performance, and battery life?

From most to least important: MUST be a 2-in-1, then battery life, then Build quality, last is preformace

• How important is weight and thinness to you?

Weight: Prob gonna be the only thing in my bag but I do want to air on the lighter side; Thinness don't care

• Do you have a preferred screen size? If indifferent, put N/A.

I have only ever used 11.5". I am open to try as large as 13" but any larger would be difficult to adapt to. Will hit up Micro-center to see what its like to carry them around.

• Are you doing any CAD/video editing/photo editing/gaming? List which programs/games you desire to run.

Web browsing, Text editors, Hw encoding because I may store a beefy PC in my dorm which I VNC into for CAD/Fluid sim/FEM/etc

• If you're gaming, do you have certain games you want to play? At what settings and FPS do you want?

Mine-craft, low settings, 30FPS (to get me through boring classes)

• Any specific requirements such as good keyboard, reliable build quality, touch-screen, finger-print reader, optical drive or good input devices (keyboard/touchpad)?

Stylus must support pen-pressure. would prefer if it would charge via USB-C. must be capable of running Linux (I can figure out driver issues, just not a MAC ig) I use the keyboard A lot So Id like something nicer, and Ethernet if possible

• Leave any finishing thoughts here that you may feel are necessary and beneficial to the discussion.

The Framework 12 caught my eye thanks to its promise of long life and its Amazing io. It also looks really cute. However it is on the more pricey side given what it is, and Ive heard the battery life is not great

The Lenovo 11e looked good but did not have HW encoding, and I doubt I would get more than 4y out of that one either.

Lastly a surface with the keyboards look like they would work although I have not really looked into them to closely.