• 0 Posts
  • 12 Comments
Joined 2 years ago
cake
Cake day: July 18th, 2023

help-circle



  • This is specifically an issue with corporate M365 accounts when a user tries to migrate to a new phone without access to the old phone where the authenticator was setup.

    Personal MS accounts can backup their auth secret keys to cloud storage, and when signing in on a new device, it authenticates you with your cloud storage (Google/Apple) and properly restores your MS Authenticator app.

    The issue is that while MS says you can backup your corporate M365 accounts in MS Authenticator, it doesnt actually store the secret key, so it’s useless.

    Have your administrator enable TAP (Temporary Access Passwords) on the tenant. Then an M365 admin can create a TAP for your account that lets you login without a password/2FA. You can use the TAP to login and rejoin MS Authenticator app. The TAP expires in 1 hour by default.


  • ^ Your M365 admin needs to know where to manage the specific authentication methods and be sure to disable MS auth rollouts. By default right now, authentication rollouts are enabled on all tenants with P1 licensing or above, and it only supports the MS Authenticator app.

    Once that rollout is disabled, the authentication methods your admin has made available to you will actually work properly.


  • The Oracle Cloud VPS only has SSH key authentication enabled by default. You can also set it to only allow SSH from your home IP in the virtual firewall before the machine is ever spun up.

    Their current free ARM offering is 1 machine with 4-cores and 24gb RAM for life. You can also add another 2 AMD machines with 1-core and 1gb RAM and still be in their free-tier.

    If you’re going to set it up and take advantage of the ARM machine, make sure you pick a home location for your account that has multiple availability zones. San Fran right now only has 1 zone, so if the shared ARM instances are all used up, you’ll have to wait a few days and try again. Phoenix I think has 3, so you can try with another zone right away.





  • Using a Pi3b to run AdGuard Home and a TailScale subnet router.

    I’ve got another Pi3b running Octoprint/Klipper for a 3d printer, but I’m currently migrating that to Mainsail running on an old SFF PC so I can run multiple printers with Klipper off the same PC.

    The rest of my stack is on an actual server running UnRaid with like 50tb raw storage.

    I will say that TailScale has been annoying asf with their subnet router setup not actually forcing the correct DNS for AdGuard Home so I can have ad-blocking while away from home. I had to move back to a pure Wireguard setup directly on my router for DNS to work properly.



  • Lahaina is fucked, not all of Maui. Power went down for all of Lahaina, Ka’anapali, Napili, and Kapalua on Tuesday (8/8/23) morning. All those towns are connected with a single road back to the rest of Maui, and Tuesday morning at 5a-ish, something like 30 telephone/power poles fell on that road and blocked up traffic in and out. There was a fire Tuesday morning, then the fire department said it was 100% contained in the afternoon and everyone let their guard down. Once the fire sparked back up later that night, all hell broke loose.

    The rest of Maui has power and internet without issues. I didn’t even lose power or Internet at all on the other side of the island.