| 00:19.49 | *** join/#utah infobot (ibot@c-174-52-60-165.hsd1.ut.comcast.net) |
| 00:19.49 | *** topic/#utah is Utah-related discussion including user groups | logs @ http://infobot.rikers.org/%23utah/ | See also ##lds | To combat spam, you must register with NickServ if you wish to speak. This may or may not be temporary. |
| 00:19.49 | *** mode/#utah [+o infobot] by ChanServ |
| 02:09.55 | eightyeight | jfindlay: unfortunately for keepass, synchronization, mobile apps, and browser extensions aren't uniformly consistent |
| 02:10.05 | eightyeight | different ux on each |
| 02:10.44 | eightyeight | further, separate developers and projects means vastly different cryptographic engineering |
| 02:11.22 | eightyeight | a compromise on a 3rd party browser extension could compromise the whole stack |
| 02:12.11 | eightyeight | this seems less likely with apps under a single umbrella, where engineering the architecture is consistent, and libraries are shared |
| 02:12.37 | eightyeight | i love keepass though. i used it for years and years |
| 02:13.37 | eightyeight | keepassxc specifically is good code |
| 13:05.44 | *** join/#utah infobot (ibot@c-174-52-60-165.hsd1.ut.comcast.net) |
| 13:05.44 | *** topic/#utah is Utah-related discussion including user groups | logs @ http://infobot.rikers.org/%23utah/ | See also ##lds | To combat spam, you must register with NickServ if you wish to speak. This may or may not be temporary. |
| 13:05.44 | *** mode/#utah [+o infobot] by ChanServ |
| 13:24.54 | *** join/#utah josephscott (~josephsco@74.114.153.251) |
| 13:58.18 | *** join/#utah aeryndunham (~aeryndunh@74.115.235.98) |
| 14:08.10 | *** join/#utah tiwula (~lane@70.89.246.241-Busname-UT.hfc.comcastbusiness.net) |
| 14:13.08 | *** join/#utah braxtron (~braxtron@216.160.248.178) |
| 14:37.45 | *** join/#utah legreathambino (~braxtron@216.160.248.178) |
| 14:38.40 | *** join/#utah legreathambino (~braxtron@216.160.248.178) |
| 14:41.51 | JPaul | keepass for my important passwords, Google chrome for my not so important ones, Duo and G Authenticator for OTP's (also Duo for push 2FA). Work stuff kept separate from personal stuff. |
| 14:46.13 | spangborn | That sounds like a mess |
| 14:46.16 | spangborn | Tbh |
| 14:48.15 | JPaul | why? |
| 14:49.27 | JPaul | I have that working across windows, mac, Linux, and Android with no issues. |
| 15:21.59 | spangborn | Spreading all of the passwords across several different managers |
| 15:22.04 | spangborn | That sounds awful |
| 15:28.02 | JPaul | not really. my ones in chrome are practically throwaways, they're for sites that don't really matter. |
| 15:28.51 | JPaul | banking and other sensitive stuff goes into keepass, and I don't regularly log in to those. When I do i have Keepass setup with the quick key to type in the user/password for me |
| 15:29.30 | JPaul | I don't see a point in storing a bunch of BS passwords in keepass |
| 15:30.28 | JPaul | and i sure don't want to keep my banking stuff in Chrome |
| 15:32.18 | JPaul | you know what is really awful? having to use 2FA for the servers I log into, I'm having to approve logins all freaking day because I'm constantly in and out of a couple hundred different servers. |
| 15:33.06 | JPaul | it's obnoxious but we have to use it due to PCI and other compliance requirements |
| 15:33.32 | JPaul | lazy devs whine about it but they aren't constantly logging into servers like I have to. |
| 16:05.58 | *** join/#utah frostyfrog (~frostyfro@unaffiliated/frostyfrog) |
| 16:28.34 | *** join/#utah yukaia (sid110254@gateway/web/irccloud.com/x-bhpzvhbqbbotzjop) |
| 16:50.31 | JPaul | joy, stackoverflow is down, right when the CEO is asking me to look at something for him on there... |
| 16:57.33 | *** join/#utah Heartsbane (tsharpe@unaffiliated/heartsbane) |
| 17:22.41 | youtah | keepass is local only IIRC |
| 17:22.45 | youtah | I hate local only |
| 17:25.00 | JPaul | yes, but then you have control over your keyfile. I just keep mine in my google drive, it syncs really well. |
| 17:25.17 | JPaul | keepass integrates well with it like that. |
| 18:36.19 | jfindlay | youtah: are you localonly, or is your location indeterminate? |
| 18:36.44 | jfindlay | not even photons are self-simultaneous |
| 18:39.18 | jfindlay | eightyeight: I only use keepassxc |
| 18:54.36 | *** join/#utah aeryndunham_ (~aeryndunh@96.71.45.252) |
| 19:19.06 | youtah | spangborn, https://i.imgur.com/CXHiqWj.jpg |
| 20:07.46 | joshh | JPaul: what kind of ssh setup do you have there? ideally you would be authenticating to duo, and getting an ssh hostcert that lasts for a certain amount of time, in your ssh-agent, to use for all machines, maybe different certs for different machine classes, but it sounds like you get a duo push for every ssh host? |
| 20:17.22 | JPaul | joshh, correct. we have a number of distinct clusters for individual clients. While we use kerberos for tickets, we still need to be able to use password based logins so we have to do a push from the individual servers. |
| 20:18.24 | joshh | ah, passwords aren't fun |
| 20:30.25 | JPaul | I check a kerberos ticket out each morning (10 hour expires) so that part is fine for me, at least for the majority of our servers that integrate. We have a couple clusters that are offsite so they don't integrate with kerberos/ldap so we use passwords on those. |
| 20:30.51 | joshh | makes sense |
| 20:30.52 | JPaul | and I have a handful of servers that are being stupid after various changes on them somehow broke the ticket system |
| 20:31.00 | JPaul | some day I'll figure out the problem |
| 20:54.04 | JPaul | I want to trade one of my developers in for a smarter model, is that an option? |
| 20:58.31 | JPaul | https://i.imgur.com/a4CVG.jpg |
| 21:53.48 | *** join/#utah youtah_ (~youtah@67.139.187.131) |
| 21:55.45 | *** join/#utah youtah_ (~youtah@67.139.187.131) |
| 23:12.23 | *** part/#utah youtah_ (~youtah@67.139.187.131) |
| 23:12.36 | *** join/#utah youtah (~youtah@67.139.187.131) |
| 23:12.36 | *** mode/#utah [+v youtah] by ChanServ |
| 23:35.33 | *** join/#utah frostyfrog (~frostyfro@unaffiliated/frostyfrog) |
