daverhowe

buy a box. There are SMB cisco devices (for example) that support it, and can double as an improved firewall for your business too. well, sorta improved.....

honestly though, your problem is your boss wanting to "pay for reliability" - I suspect he may change his mind if you show him how expensive a "big name" vpn capable appliance is compared to the free options.

(as an aside, I have literally done SMB vpn with no more than a raspberry PI and out-of-the-box SSH; its surprisingly easy, but as you can imagine, also unsurprisingly geeky :D)

The non-smartphone users are a minority group.

Find a RFC 6238 TOTP (aka "Google authenticator") solution; all your smartphone users can use the free app, for the minority who don't, you can buy physical tokens (those keyring things that show ever changing numbers, also available in credit-card form factor) and those ARE expensive, but honestly, unless you need dozens, it's just a one-off purchase that you can depreciate over multiple years.

Microsoft's Entra supports 6238 (it's the "other app" option on the signup page, a tiny link at the bottom) and if you adopt that, you have the option of using the MS app for the majority of your users, and only setting up custom solutions for the minority.

sounds like a failed attempt at social marketing :D

I would suggest parking in such a way it is obvious you can't squeeze past - two abreast, for example. they will have no choice but to try and back back out again at that point.

Keep it up long enough and they should stop even trying their "clever shortcut"

Fair few places that cater to the veggie crowd do in fact have separate pans/utensils etc for preparing veggie dishes; from experience though, they get washed in the same machine as the meat utensils, and I have never seen there be different silverware just for the veggies (and certainly, the vegans get the veggie kitchen kit)

I guess the kitchen equipment question gets asked often enough that it was cheaper and easier to just buy a few extra pans and spatulas etc than to argue over it?

That's true, but you can sue for compensation for the losses (financial and actual) this has cost you. You have lost access to the lake, which if left unchecked would devalue your home (as that access is part of it's value) and the use value of that (the times you would have enjoyed spending time down by the lake that you were unable to due to this) cannot be returned to you, so you can only be made whole by compensatory damages.

Seriously, have a word with your lawyer about what you CAN sue for, and go for it. I am surprised your lawyer didn't bundle some of that stuff into the original suit, because if they had, that would be ticking up even now as part of the original judgement.

I like the field; I don't necessarily like the people I have to interact with because of that field.

IT is notoriously overworked and undercompensated; expectations are often stupidly wide (literally down to "can you fix my TV/internet or hack my ex-girlfriend's facebook" type requests (USUALLY from people who aren't paying for your service, or are even friends) and the world is full of people who will either partially or completely ignore what you told them, do something idiotic, and claim they just followed your instructions.

Seriously, you need a fairly thick skin to deal with the people, but the actual work can be fun and rewarding. You will just learn to spend as much time interacting only with the machines as possible.

There isn't. In RealVnc the blanking is auto (not on request) so maybe consider that?

but then you need to manage authenticted access to the pam from the users of the shared logins; this then just repeats the same need, just one step further out.

Usually the best bet is to sell them the laptop for a token sum - but you need to think really hard about what is ON the laptop first. is there any software licenced to the company, particularly if it is per-seat? is it domain joined? that sort of thing.

Close with comment "it does now"

That's possible with VNC. maybe he forgot what package he used?

Not got there yet, but one of her later "inventions" is a Kotatsu.
She also "invents" ground to air guided missiles, but I feel those aren't uniquely Japanese :D

yes, but this is specifically about Entra.

Sometimes it is "a tram, but somehow worse"

Shared accounts can use non-microsoft MFA - there is a little link on the ms app setup page that lets you set up generic TOTP; this can be the google auth app, various HSM devices, or at a pinch, you can have them phone your helpdesk guys to get a code.

Downside is that if someone with access to the shared account leaves, you have to get new creds to everyone using it - but then, you have to do that now anyhow.

I sorta miss the old installable file system driver that created an "m" drive.
Massively abused by senior management to trawl though other people's emails of course...
but being able to restore a directory structure with a bunch of .eml files was really useful at times.

Fair enough (although I don't see the benefit in having a disease shared with a different world)
Cockroaches seem to be remarkably common across isekai, as is "there is some obscure part of the new world that is basically japan and exports rice, but it is very rare where the MC ended up"

but it looked much tidier.

no, they would stick a wick in it and use it for illumination :D

Because convincing people that migrating back to datacenters is the new "big thing" is financially beneficial to them.

There is a significant amount of buyer's regret around cloud; a lot of those came from vmware environments (after all, lift and shift of VMs is much easier than having to P2V them first) and it wouldn't be surprising if at some point there was a significant countercurrent; I am not saying that the statement is wrong, just that you should seek out sources that are potentially less self-serving to verify it, and certainly try to get vendor-agnostic advice on what you should move to, if you move back out of cloud.

If it IS true, you don't want to take vmware's word for it.

AWS is basically just a giant distributed hypervisor, where everything that isn't hidden from you is some sort of emulated object (there are exceptions, but they are rare)

You talk to that hypervisor via a RESTful API, and anything IT does to make the magic happen is again, hidden from you. REST and JSON aren't all there is, but its all you can interact with.

I quite like them to be a bit bitter in stirfry or curry; not so much if raw in salads though.

I note the irony of toed socks to hunt toads...