• 0 Posts
  • 61 Comments
Joined 1 year ago
cake
Cake day: June 7th, 2023

help-circle


  • As a LightBurn user and license holder, this is annoying, but I could see this being a good thing in the long run. Right now, there is very little opensource alternative to LightBurn. As of today, there is a much stronger incentive to make it happen. I’m hopeful this spurs on a modern tool in the open source community that works as an alternative. What LightBurn might have done is save them selves some support overhead and created competition. We’ll see how that works out for them.



  • Effectively, the other option is passwords, and people are really, really, bad at passwords. Password managers help, but then you just need to compromise the password manager. Strong SSO, backed by hardware, at least makes the attack need to be either physical, or running on a hardware approved by the company. When you mix that with strong execution protections, an EDR, and general policy enforcement and compliance checking, you get protection that beats the pants off 30 different passwords to 30 different sites, or more realistically, 3 passwords to 30 different sites.


  • The modern direction is actually going the other way. Tying identity to hardware, preventing access on unapproved or uncompliant hardware. It has the advantage of allowing biometrics or things like simple pins. In an ideal world, SSO would ensure that every single account, across the many vendors, have these protections, although we are far from a perfect world.



  • Since I was personally called out here, Windows 10 was my last home version of Windows, but it was earlier days of 10. For work, however, I manage about 1700 Windows workstations and servers, so I know all those problems still. To be fair, I’ve been running Linux in some form since before Ubuntu existed. I think it was Debian in 2001 or 2002 that was my first Linux desktop.






  • VNC might have seen improvements over the years, but last time tried it, it didn’t handle high resolution/detail well at all. RDP can stream practically any media in close to real time, as to where VNC really broke down if you tried to change too much of the screen at once. Ideally, there’d probably be a new open screen sharing standard that used modern encoding and decoding to allow for high bandwidth connections smoothly. Moonlight gets close, but isn’t really designed as an RDP/VNC replacement.


  • Others have given you a good idea, but since you appear to be using Unifi for switch and firewall, o can give you a clear answer: Don’t set vlan on the Synology. Set it as the “Native” VLAN on the switch port going to the Synology.

    Synology can be vlan aware, but you don’t need it. Let the switch do the talking.

    On the Synology I recommend putting it on DHCP while you test. Once it starts getting an IP in the right subnet, you can then switch it to static. Just make sure your gateway is right, putting it wrong will cause the device to not be able to reach outside its own subnet.