blocke

Ah yes. We can't let self hosted app traffic flow across the Internet in a way that escapes the vast Internet surveillance system run by the Americans called Cloudflare.

Hmm, Tailscale is too convenient and that traffic is going dark from Cloudflare's all seeing eye.

The hotels I've stayed out with this functionality all had an Aruba Wireless system with a hospitality model AP on a 1-gang wall box somewhere near the floor or strapped to the back of the TV.

Aruba wireless (like many enterprise wireless vendors) has a mDNS proxying and filtering system which is essential for places like college campuses. Airplay and Miracast (infrastructure mode) both use mDNS for service discovery. In Aruba the system is called Airgroup. When seeing a new MAC address the wireless controllers queries the RADIUS server. The RADIUS server can return a configuration for that new MAC address which tells the controller what other devices can interact with this new device using mDNS.

I always assumed this vendor adds and removes Airgroup configuration to allow the phone and the TV to see mdns from each other while preventing this from other nearby devices on the same VLAN or SSID. This trick might be enough but also pushing a DACL to the wireless controller to properly packet filter all network traffic from unapproved devices would strengthen the solution.

Thanks for the correction on alert().

Tons of places outside of F500 are doing that. At work we just disabled IMAP for almost all O365 accounts and any other method of authentication that doesn't implement our two factor authentication. The rising number of compromised accounts because the user used the same password elsewhere, apparent bruteforce attacks, etal forced the issue.

Of course MDM is not required for any of this. Worst case is on Android you're forced to use Microsoft's Outlook app.

I'll give 4500 a whirl to see if it increases the success rate. It's a good idea. However it's not inconceivable to have sites like cafes that only allow 80/tcp and 443/tcp because that was an option in the UI on their wifi router for guest networks.

At this point if I was designing a VPN for client devices I'd have a mode that looked at as close to HTTPS as possible. There is one tool to tunnel over websocket but this was already sucking up too much of my play time. :)

Cisco AnyConnect, while expensive and bloated, works great as it initially connects on 443/tcp and then tries to setup UDP. If UDP fails it just sticks with the TCP connection and "just works".

I setup Wireguard and was pleased with the setup. Unfortunately I tried to use it over the next week only to quickly realize I should have kept my OpenVPN install instead.

Outbound port filtering is incredibly common on public and guest wifi networks and I found three use cases in my first week where OpenVPN on 443/tcp would have worked fine. The inability to use Wireguard over TCP and bypass most outbound port filtering by using tcp 443/etal makes it unusable in my daily life. I can understand why TCP isn't performant but my choice isn't performance vs non-performant. It's works somewhat vs GFY.

And yes I've seen the udp over tcp forwarding hacks. They don't work on iOS and some look outright dangerous (hello open proxy).

Hopefully this can be addressed before Wireguard hits 1.0.

Let's not pretend this is a full list. It's just a list of example apps.

"Hardware companies"

Does that mean bundled by carriers and crappy Android phones? Lovely.

My response to this site as someone who has had a paid Dropbox account for years:

Oh no. Oh... no. follow link to dropbox.com Ugh. What happened?

I'm now under the impression Dropbox will go out of business and I need to explore alternatives.

Edit: I think I identified what makes me intensely dislike it. The color scheme and design screams "This is no longer for you, it's for hipsters."

The touch bar examples shown are a usability disaster. You're going to hide UI from the screen and make me keep looking at the keyboard to find functionality?

I stopped looking at the keyboard every 10 seconds when I learned how to touch type.

The presenter spent most of his time looking at the keyboard and not the screen.

This gimmick will disappear when Apple decides a touch screen is needed to complete the slow merge with iOS.

You can pin radio stations. Unfortunately it only grabs a handful of songs at the top of the playlist. So dumb.

Edit: Radio station downloading now seems to grab at least twice the amount it used to. Which puts it firmly in the "meh" category when it comes to usefulness.

Play Music's Youtube integration is a pointless distraction that makes me less likely to continue to pay for the service, not more.

If I want to watch music videos I'll go to the Youtube app. So damn annoying when I accidently tap the play video hover button when I really meant to swipe to the next song.

If it weren't for YouTube's popularity I'd say the integration was a sign of desperation.