Appreciate the transparency and update. This definitely eases concerns. Thanks!

Could we get an introduction into who the new team lead is, what their experience is, and maybe some info on the rest of the team? The current repo owner has no information and has only ever worked on Mlem with this user account. Not exactly confidence inspiring from afar.

Your security team sucks. Users should be encouraged to report anything sus, even if it occasionally results in a false positive.

Would be kinda fun if you could switch between views

“Guys this is a democracy I promise. Just do your jobs and don’t complain, speak out, or vote against anything we say. You guys totally still are stakeholders in this platform though. Please volunteer more of your time so we can monetize your free content. Thanks!” - Reddit Admins

Reddit mods crave the “power” they get from donating their time and labor to a mega corp.

Upgraded cache = bigger clothes pile.

I’m also on gmail. Haven’t had any issues with it, no real desire to change.

They’ve really been dropping the ball lately. Especially with the SSL-VPN component. This is especially troubling considering I’ve had to implement emergency patches several times for this flaw on my own boxes.

+1 for UptimeKuma. I use that in my homelab and its solid.

Just to verify, are you doing this all on the same network? I definitely have had issues with devices not completing enrollment due to this. Also, the other obvious one to check for is to ensure this user isn’t over the device enrollment limit, which I think is 15 devices. One last bit, make sure this user has an intune license! It really doesn’t seem like this is a device issue if the user is sure there is not another MDM profile on the device.

Nope. It can’t really be self hosted anymore, as having a residential IP is a straight track to the spam folder. It can be done if you also pay for a mail relay service, but then what’s the point of self hosting when you need to rely on a cloud service anyways.

Oops! You clicked on a simulated phishing test.

Saw this one over on /r/cybersecurity and just goes to show why you should always have healthy skepticism for new closed source applications with wild claims.

Not surprised. They need to milk every last drop of revenue from their users free content for the upcoming IPO.

I do believe Barracuda came out with a new authentication mechanism to replace the magic links at the end of April. They are suggesting folks move over the temporary passcode authentication instead. You can read more about it in their blog post here: https://esstimeline.barracudanetworks.com/publications/temporary-passcode-authentication

I have began experimenting with this in my org today. I don’t love sending auth codes over email, even if its only live for fifteen minutes, but we do need a solution to access shared mailbox quarantines without security team intervention. I suppose its better than the past magic links authentication we were using.