yaleman

The local emergency services uses it as a duplicate method because it's mostly more reliable than any service they can afford to offer... and historically a lot of people were using the site, so sharing helps get things noticed.

The fact that tensorflow takes up 12.9TiB is truly horrifying, and most of that because they use pypi's storage as a dumping ground for their pre-release packages. What a nightmare they've put on other people's shoulders.

It does, works great. Not sure about vaultwarden's support for it though.

Run your own Kanidm instance for free ^_^

It's literally a big red X on the OSS version, so no, it's not "in the base pricing".

I think you'll find that's google's services, not Apple's....

OIDC support's been merged, which would likely help with that?

There's a lot more checks and balances built into rust as a language, so the foot-gun opportunities are less likely - which makes it rather suitable for reliable systems programming.

And getting back to this particular case... kanidm is fast AND reliable. There's a lot of testing going on comparing it to 389 DS.

Yes, it's a replacement for both - still in (a rapidly developing) Alpha stage currently.

So far LDAP and PAM/NSS modules are fully operational, and OAuth's being tested.

Authentication is part of the "accounts" part. :)

The front page says "the research and education system for IAM" ... that reads like it's not for production use and would turn me off immediately.

Turns out, even before you click on "OK" to start watching, it's doing it in the background - my watch history is now full of hours of this junk :(

2FA on SaaS applications is free and easy, while centralising authentication is much harder - you need to manage an authentication platform instead of just using the application's own authentication.

Taken by itself the suggestion is odd, but in concert with the next entry "use password management software" it makes for a low-cost, zero management, higher security stance than not suggesting 2FA by itself. Noone should ever ignore the option to turn on 2FA.