@typingloudly @rmhrisk@SwiftOnSecurity@ericlaw Is there a better way to get vendors to improve poor products other than the security ecosystem forcing them to? If these companies see the writing on the wall, maybe they’ll finally get off their collective bums and we’ll all be better off.
@hoyty@ryancdickson@Collab_Seth@awakecoding Is it so old that it doesn’t have an API either? There are a ton of things that don’t support ACME natively but can easily have cert renewals automated by another system via a script that uses the device’s API.
@Chris_vonW@ryancdickson The dns-01 challenge in ACME (RFC8555) works very well for this purpose. You can get public certs all day long for systems that will never be internet facing.
@dfinke@SwiftOnSecurity I don’t know why but I despise using + for string concat. Much prefer embedding variables in a double quoted string or using a template string with ‘-f’
@awakecoding With kid laptop the main symptom was that it would be slowly discharging while plugged in when on and in-use but charge back up when off/standby. CPU also clocked down for power savings causing poor gaming performance. Like it was getting power, just not enough power.
@awakecoding Had a very similar issue on kid’s laptop recently. Hit or miss whether a given power supply would be recognized as the full 240v across multiple adapters both oem and 3rd party. Turned out to be slightly broken DC-in connector on the MB. Thankfully replaceable without a new MB
@sabre1041@awakecoding What are the chances the box I’m having to troubleshoot TLS issues from is running new enough software to have this bleeding edge version of curl? Dig the progress for sure, but prob not practically useful for at least a few years.
@SwiftOnSecurity 15 search suffixes results in potentially 30+ dns queries because windows queries both A and AAAA for each one. I’ve seen clients getting DNS timeouts because there were so many. And then they blame the DNS guys for things being slow. 🤦♂️
@awakecoding I’d suggest using Cloudflare for initial registration even if you don’t want to keep it there because you’re getting the registrations at cost. Pre-buy however many years and then optionally transfer somewhere else. You’ll save at least a few bucks per year.
@devnetsecops@SwiftOnSecurity Ditto and this has the additional advantage that you can customize which nameservers are queried which can be important when troubleshooting.