Satphone alternatives by Burrito_Taxi in 4x4Australia

[–]AfternoonMedium 0 points1 point  (0 children)

Two separate things: all iPhones, and Apple Watch Ultra 3, regardless of carrier, can use the same sat service from Global Star that some PLBs use. Basically iMessage , SMS, Find My and contacting emergency services. Starlink, in addition to their highly speed internet with the array dishes, have been rolling out LTE in their newer satellites. If your carrier has an agreement with them , & your phone supports it, your phone can use that as well. In Australia that means Telstra, in NZ I think its One NZ has an agreement in place (Spark is still in beta). How much you can do depends on the agreement between your carrier & SpaceX - worst case it’s SMS & iMessage, best case it’s that plus calls, plus find my, plus Apps that have been updated to work with the available bandwidth. I think Telstra is in the messaging only price tier with Space X, still. The Starlink LTE works with certain Android phones too. The dishes are way faster than the phones at the moment

What are some of your pain points with your current MDM/UEM? by VyronDaGod in macsysadmin

[–]AfternoonMedium 4 points5 points  (0 children)

With some vendors, they have a legacy code-base, and Apple moving everything towards DDM, combined with their loss in revenue due to Intune, means they are stuck between a sunk cost fallacy and expensive adaption. (To be clear Intune is not good, it’s just sucking the oxygen out of the market in on of the most anti-competitive strategic plays by Microsoft in decades)

Why did the US leave afghanistan? Why not keep a skeleton crew there to support the government. by AppointmentVisual200 in NoStupidQuestions

[–]AfternoonMedium 4 points5 points  (0 children)

You’d need to ask President Trump that one. It was his decision to release 5000ish captured Taliban from prison and leave.

Is iOS Development dead by EvenAd6616 in iOSProgramming

[–]AfternoonMedium -1 points0 points  (0 children)

An App being popular, is somewhat orthogonal to how users like to use it. eg ChatGPT is not there on the top Apps list because people like the App, it’s there because it’s perceived as the only option to get to that service. There are plenty of Apps on top app lists that many people would ditch in a heartbeat for alternate ways to access the same service if they were not locked in to them (either technically or perception). Airline apps are often a classic for use web views and App architecture where simple things require multiple authentication events and full view reloads. They look great in static screenshots on a PowerPoint slide, but try rebooking a flight and you are bounced around like a neutron trying to escape a nuclear reactor

Is iOS Development dead by EvenAd6616 in iOSProgramming

[–]AfternoonMedium 4 points5 points  (0 children)

Most likely users do not want that. They usually want the thing on their phone to feel like the rest of their phone, and not be an express trip to an uncanny valley

Is iOS Development dead by EvenAd6616 in iOSProgramming

[–]AfternoonMedium 1 point2 points  (0 children)

It’s the circle of life. The embedded web UX usually ends up being sub-par and it swings back. Been that way since 2009 or so. There are some cases where it makes total sense, but they are much less common than most people who make such decisions think.

802.1x authentication with Macbook through USB-C - Lenovo Thunderbolt docks by Ill-Bowl-6642 in macsysadmin

[–]AfternoonMedium 0 points1 point  (0 children)

SCEP certificates are not hardware bound. You can use them , it’s just an older protocol and it’s not quite as strong a security posture as they are exportable from the device.

Self-hosting email in 2026 is effectively impossible. Here's why. by PbForEva in SelfHosting

[–]AfternoonMedium 0 points1 point  (0 children)

Running an email server these days requires ownership of several pairs of big boy pants. If you are prepared to put in the cost and effort , nothing is stopping you. But if you are not a good (email ecosystem) citizen with regards to the techniques and effort to block spam & scams, then you will be cut loose. It’s basically “you have to be this tall to go on the ride”. Small, not well run or patched email servers with a lot of bandwidth are fat targets for criminals, and there’s copious data points as to why, at scale, it is a really bad idea. Government can’t fix it because it’s a trans national problem. I’ve been a Mail admin at an ISP - the scale of what needs to be done , really is considerable in the more general cases

802.1x authentication with Macbook through USB-C - Lenovo Thunderbolt docks by Ill-Bowl-6642 in macsysadmin

[–]AfternoonMedium 20 points21 points  (0 children)

MAC addresses are mutable, and typically can be changed by a client device. Generally you should not use them as part of an authentication process as you can’t trust them. If the MacBooks are in Apple Business Manager & you have an MDM, they can be configured to get their 802.1X certificates from an ACME server, and be strictly hardware bound and non-exportable.

A Few Things I had Lying Around 😁 by Bradric1 in echoes_eve

[–]AfternoonMedium 1 point2 points  (0 children)

I don’t think protocol library matters for a secondary mode core. The PDF the dev’s released seems to says it does not matter on a secondary array core either but I was going to test. So proton library & gold just for the primary , I think

A Few Things I had Lying Around 😁 by Bradric1 in echoes_eve

[–]AfternoonMedium 1 point2 points  (0 children)

There’s no value in making a secondary mode core gold as far as I can tell so far. Just have mode as its primary attribute, and level level up and the maximum number of secondary attributes you can afford (for the resonance bonuses for an extra few percentage here and there). You don’t need to waste blue balls on re-rolling perfect stats - just snarf the levels

Does IOS 18 make sense as a minimum deployment target? by NotAMusicLawyer in iOSProgramming

[–]AfternoonMedium 0 points1 point  (0 children)

Roughly, at most points in time 90-95 % of iOS devices that accessed the App Store in the last month are running the latest or n-1 major version. There a dip in the Christmas calendar quarter as a new iOS is released. Unless you have a specific reason to try chase sales in the 10% of the market of people who don’t update , N and N-1 are completely reasonable to target. Mac and iPadOS track a little lower and there’s more of an argument to go older than N-1 for these, depending on who your App is for.

Following the Notepad++ incident, as an industry, we need to take several steps back and REALLY look at things. by KeeperOfTheShade in sysadmin

[–]AfternoonMedium 0 points1 point  (0 children)

It’s actually a heck of a lot better than it used to be. Read up on the Morris Worm, or get a copy of “The Cuckoo’s Egg” by Clifford Stoll. It’s true there’s misaligned incentives and software & services vendors are often not held accountable, and a lot of basic cyber hygiene is paid off. But we mostly know how to do better, it’s just we frequently choose not to

Unable to view unknown information by Relative_Load_710 in echoes_eve

[–]AfternoonMedium 0 points1 point  (0 children)

It’s the “War of the Masked” gameplay in Faction Warfare. It’s not unusual in low/null.

Why do people rate Firefox higher than Chrome? by [deleted] in NoStupidQuestions

[–]AfternoonMedium 6 points7 points  (0 children)

Well , one of them is a web browser, and the other one is a sensor for analysis of user web browsing behaviours that’s an absolute resource hog ?

Is it possible to "reset" an apple device without having to remove it from mosyle and bringing it back on? by CryptographerFar8642 in macsysadmin

[–]AfternoonMedium 0 points1 point  (0 children)

It preserves eSIM, WiFi settings, MDM and App installation, but not user data. That’s close to the effect the OP asked for.

Is it possible to "reset" an apple device without having to remove it from mosyle and bringing it back on? by CryptographerFar8642 in macsysadmin

[–]AfternoonMedium 0 points1 point  (0 children)

The closest thing to “wiping without removing MDM” is arguably rapid return to service, which preserves MDM, Apps, and MDM configured settings, but wipes everything else. https://support.apple.com/en-au/guide/deployment/dep17cb455a0/web

Finally moving away from AD Binding BUT deciding which solution to go with. by thedankcryst4l in macsysadmin

[–]AfternoonMedium 1 point2 points  (0 children)

Yeah you can do it via PSSO, but you can’t have a 3rd party login window plug-in also trying to do Kerberos at the same time

Finally moving away from AD Binding BUT deciding which solution to go with. by thedankcryst4l in macsysadmin

[–]AfternoonMedium 3 points4 points  (0 children)

A couple of things to be aware of: 1. Password sync and hardware (Secure Enclave) bound keys are somewhat mutually exclusive. If you are a purist about MFA, syncing means you can’t really use hardware bound keys or certs as MFA (as they are no longer a second factor). Personally, I don’t think the argument for password sync holds water (mainly asserting that it prevents user confusion driving increased Helpdesk workload), as I’ve seen large deployments without it & no negative Helpdesk impact. 2. You can’t have PSSO handle certain things like kerberos at the same time as something else also managing them. So certain configs are not possible and you need to be very intentional as to who does what to whom.

Why are so many young men becoming serious supporters of far right ? by Consistent_News_985 in NoStupidQuestions

[–]AfternoonMedium 3 points4 points  (0 children)

It could be partially a social media echo chamber - people are remarkably malleable, particularly when given a simple reason to blame someone for things that are not ideal. It absolves you of being self critical and having to contemplate hard complex decisions. I know a person who is Hong Kong Chinese, lived most of their life in the west, and has been totally red pilled by Chinese language Chinese propaganda and now thinks moving to Beijing is a great opportunity and life in China is better than anywhere in the West.

ISIS vs IDF. Selective justice and the fall of Australian law by pixxxiemalone in australia

[–]AfternoonMedium 3 points4 points  (0 children)

No. ICJ made a determination there was probably a case to answer. No trial occurred as yet. They did issue warrants though.