Ctrl blog discussions

mailbox.org does not support MFA (multi-factor authentication) at all. Therefore it is NOT GDPR compliant because it does not offer reasonable security. It will also not be considered CRA compliant when Cyber Resilience Act comes into force. I don’t think it is compliant with BSI requirements, yet it offers [packages to the public sector](https://mailbox.org/en/education-and-public-authorities), but what about all the news about government entities being hacked for ransomware and data theft? Mailbox.org has a section about [your social and ecological responsibility](https://mailbox.org/en/company#our-responsibility) on your website, but what about your responsibility to your customer’s security?

In the [recent SANS Newsbites](https://view.email.sans.org/?qs=533959a804114f542720fb441a50fc1b5ae0ca7f2b35400a108504c695c220871225af4d289c01cc8a57847d83e147e607330d3d38e6996526b297a451804fdd7da41d2aeef5c25175554b7128f6b1e5), the attack against Spanish Telephonica is discussed and a quote about MFA:

> In today’s threat environment, implementing Multi-Factor Authentication (MFA) is now table stakes for all systems, but in particular sensitive systems, whether they are internal or external-facing. MFA should now be viewed in the same regard as seat belts in a car, and those that don’t use MFA viewed in the same way as those who don’t wear seat belts.

what should i do if the code on the command prompt dosent show the disable setting in the processor power management

Any plans to maybe retest BTRFS vs EXT4 again in 2025? I mean we now have blazing fast SSD NVMe. Like the Crucial T705 Gen 5. I believe I see now much better speeds with BTRFS. Can you verify this as well?

violin plots should not exist

https://www.youtube.com/watch?v=_0QMKFzW9fw

I totally agree with everything that is said.

I known this comment might be useless too repeat this complains but there are many T1D with exact the same issues.

I had disabled all alarms on the official freestyle libre app. And i'm using the xDrip+ and AndroidAPS with the nicer alarm options.

I use Tor browser. Broadly, the popular internet has become much harder to access in 2024, in part due to Cloudflare, which must itself be a symptom of challenges with bots. Reddit is hit or miss with its own bot blocker. 4chan is blocked by CF. Youtube is basically useless at this point. Most videos fail to play through to completion. We are really deep into a process of transformation, that will only become more restrictive as internet 'safety' laws pass and come into effect. The end result will probably be no internet without government ID, just like China.

Wish ai had come across this review earlier before I bought a Raise 2. The folks and some of their “backers” are a bit tone deaf on improving the product which arrived with connectivity issues, firmware issues and generally offered a sub-par experience for a keyboard touted as “premium”. Build quality is good, customer service offers non actionable answers and some folks who bought a Defy have the same issues, still unresolved, after almost a year. Dogma either is content with their offering or just doesn’t want to listen to impartial feedback from folks who put their money into their unfinished product.

why not just use the reset tool for the yubikey? which effectively deregisters it.

That's a great post and it once helped me with the decision whether I should use "legacy" formats. By now, the majority of the providers supports WebP (Teams being the only exception I have found), and Facebook even supports AVIF OG images.

Here's my summary: https://darekkay.com/blog/open-graph-image-formats/

Only worked for me if secure boot was disabled, other than that top notch, even on F41 <3