See https://alexbarry.net for projects I’m working on, and contact info.

Also check out github.com/alexbarry

  • 1 Post
  • 30 Comments
Joined 1 year ago
cake
Cake day: July 3rd, 2023

help-circle


  • This is actually what I did when I was in school, and overall it was quite pleasant. There was some WYSIWYG LaTeX program too that I shared with some colleagues when we were working on a document together, I remember it working okay.

    But I don’t see the average student, especially studying non technical stuff, to pick up LaTeX just for normal sort of essays. Even I am fairly rusty now. And honestly I don’t even know if I could have managed it during high school, where I had to write English essays and stuff with specific formatting for references. (I am grateful that my engineering education was less strict about that sort of thing).

    I was hoping that someone would suggest a self hosted web document suite, I think “Nextcloud” is a popular one. Then it should work on any OS, and you don’t have to worry about syncing files. Even if you can pay to have someone else host an instance (not sure if this exists), and ideally a program that can keep a local backup synced to your PCs would be a big step in the right direction. Syncthing seems pretty great, though I haven’t used it much, and on iOS it doesn’t seem to be able to run in the background.

    edit: I just read another comment that recommended OnlyOffice, this seems like another good option (source: this reply: https://lemmy.ca/comment/9415293). Aside: is there a proper way to link to a comment on lemmy that will go through your own homeserver?








  • thanks, how did you do this? Did you just download it and add a background yourself (and upload via lemmy) or is there some cool markdown/lemmy trick?

    I was going to say that I was on my phone and couldn’t do that, but I guess I probably could have. (edit: also I forgot that Lemmy even supports image uploading, let alone that I could link to it) I mostly just wanted to see if Lemmy supported the embedded image markdown syntax of ![description](URL to image). (It does!) I found online that some markdown variants support adding CSS at the end of the image, but it doesn’t look like lemmy supports them.




  • You may know this, but my understanding is that they randomly stop either to do another delivery on a different app, or to get gas/etc. (edit: I don’t think this justifies it to the customer, hence why I’ve stopped using these apps. I do have some sympathy for the driver, I have heard that the companies incentivize them to maintain a streak and take fewer breaks between drives, and somehow it seems like long unnecessary pauses aren’t penalized (perhaps because they’re hard to distinguish from traffic))

    I haven’t used delivery apps in a while due to cold food and outrageous prices.


  • To clarify on this: even the people who use gibberish as their password and don’t store it and rely on password resets via email are actually somewhat safe if their email is also highly safe. Maybe their password strategy for CRA implies they don’t take their email password security seriously either… but still, my point is just that “at least as secure as your email” can be an incredibly high bar if you do it right


  • axby@lemmy.catoCanada@lemmy.caCRA now allows 2FA apps
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    5 months ago

    Yes but you’re free to use an email provider which also supports security keys, which gmail and proton mail* do. I understand that the CRA needs to accommodate the average person who doesn’t care about security, but I think everyone in this thread appreciates when they also cater to people who care deeply about security and are willing to use strong unique passwords in a password manager and security keys or at least TOTP.

    * it seems like they require keeping TOTP enabled because their mobile apps don’t support security keys. Meh.


  • This may sound like a wild fantasy to some, but the US IRS seems to have some partnership with ID.me which supports security keys. But I’m impressed that the CRA supports TOTP before major banks so maybe this could happen.

    Granted they also have separate logins for state income tax and California is… well let me just say that I’m grateful that the CRA doesn’t force you to reset your password every 4ish months. (California state income tax (FTB?) does).


  • Ah, I hadn’t heard of the SSL issue, thanks for sharing!

    I’ve noticed that Tangerine only allows for a 6 digit pin, but I think they might also allow for a security question and SMS 2FA? I started signing up with them and gave up when they required a Canadian cell number (I hadn’t yet switched due to high costs, but recently they’ve become surprisingly reasonable—ignoring roaming) and I saw the 6 digit pin password requirement.

    I think it was also BMO that a friend told me required a maximum 8 character password until very recently?

    Anyway overall, thanks for reassuring my suspicion: I should just pick one of the banks and not let “perfect” (or even “decent”) be the enemy of “almost adequate but not great”.


  • Thanks, I suspected this (I only see “authenticator app” when I log in on a new device or periodically, but I wasn’t sure.

    Related: for finance related services like Questrade, I’ve stored my TOTP keys on a U2F key, Yubico in my case. Besides the hassle of managing physical keys, is there any drawback to this approach? I’m slightly worried I’ll lose all my keys in a house fire or something, but I assume there’s a recovery option.


  • Unfortunately I think this is the norm with big banks in Canada, and it is similar to a credit union in the US from when I briefly lived there. Security seems to be a second priority to people losing access (presumably only briefly, since they have brick and mortar locations everywhere).

    Wealthsimple and Questrade seem to support TOTP but I’m not sure if you can still bypass it with SMS. I don’t think so but I haven’t dug into it.

    I’ve used CIBC before and they also seem to require keeping SMS 2FA enabled. Also they send me fraud alerts over SMS, “respond Y to authorize this suspicious transaction”, and I’m dreading the day where I have to enable roaming while travelling just to send a text. They send push notifications through the app to login on a new device though, so maybe in 10 years they’ll do it for transaction approval too.

    Also aside about TD: is there really no way to download a CSV file of all your transactions? My partner uses them and I think we were limited to 18 months, and may have even had to download each much separately (luckily I can use use a program like cat to workaround this, but that seems like a pain for most people). CIBC has irritated me in a lot of ways but I think I can download transactions from back to 2012 when I first opened my credit card, maybe earlier.

    Do you or anyone know about other big banks? My partner and I are looking into a joint account and I want to be able to download all transactions to CSV. Ideally we could get TOTP only (no SMS 2FA) but I’m not counting on it.



  • axby@lemmy.catoCanada@lemmy.caCRA now allows 2FA apps
    link
    fedilink
    arrow-up
    1
    ·
    edit-2
    5 months ago

    It looks like you may be able to disable SMS 2FA entirely? It’s unclear to me (edit: if this is a viable option):

    Can I stop getting Short Messaging Service (SMS) messages for CRA’s Multi-factor authentication?

    Yes. You can text “STOP” to 27223 or reply “STOP” to the message containing your one-time passcode to stop receiving SMS messages to that telephone number in the future. However, it is important to note that CRA’s Multi-factor authentication (MFA) service is mandatory and a passcode is required to sign in to the CRA’s sign-in services. Texting “STOP” will prevent your telephone from receiving an SMS message with your passcode in the future. Without the passcode, you will be unable to access the CRA sign-in services using this option and will need to choose an alternate MFA option to use. This option applies only to Canadian telephone numbers.

    I’ll probably leave it enabled anyway just in case (given that I only log in to CRA once per year or so), but I applaud the potential of relying on TOTP only, and not allowing SMS 2FA as a “back door”.