CosmicTurtle0

Me spending hours putting together a FAQ document and putting it in slack.

Coworker: hey I have a question on x. Can we pull up? Five minutes tops.

Me: did you read the FAQ?

Coworker: yes but it's a bit different.

Jump on a call, sharing my screen and going through the document line by line, taking up a full hour.

I'm not as sure about that. If you paid your premiums, etc. into a low yield savings account, especially when you start when you're young, I think the value proposition would be more than insurance where you have no way to control payment decisions.

Please do not read this as me saying don't get insurance. Read it as our insurance is failing to provide the value that we pay into it and need something better.

The Acquired episode goes into detail how we ended up with a private payer system and it's so infuriating. Our health system was being set up around the same time as the UKs and they show how different incentives lead to where we are.

The Acquired episode made it clear that the customer isn't the people who use the software. Their customer is the CEO and the CIOs of hospital systems.

I was listening to the Acquired episode on Epic and they touch on the severe cost overruns in our healthcare system. They make a point to share that hospitals aren't the ones making a killing. It's insurance companies.

They make a compelling argument that if you add up the total that you pay to insurance, taking into account what your employer pays, there's no way you get that much value out of your health insurance annually.

I've started employing one physical hardware token as my primary means of MFA and a TOTP or backup codes if the website provides them.

I have two backup hardware tokens (so three total) but it's become impractical to keep them all in sync. And not all websites support multiple hardware tokens.

My initial idea is to have a key locked at home in the event that I lose my primary key. The third was just a spare I got at work.

Also the number of websites that don't have proper MFA that really should amazes me.

E-Trade has that shitty symanticVIP MFA. My primary bank still does cell phone MFA with no plans to do TOTP.

Honestly, the bare minimum should be TOTP.

And remember kids: passkeys by themselves are not MFA.

"You won't be arrested if you don't do anything wrong. Just let them do their jobs!"

You're supposed to have backups for MFA. Though for passkeys (specifically ones for yubikey) are really hard to backup.

I am not always going to remember to register my primary yubikey and my two backups that are physically never together.

There are some brave businesses around here that have started posting signs.

"Due to tariffs, we've had to raise our prices."

"Achually, she was a journalist, not a prisoner of war. So we can fuck her shit up."

- Russian propaganda, probably

Not just looking.

They are hunting to hurt people. Desperately, even.

There was a podcast episode about this. I want to say freakonomics or similar.

Iirc, the margins on mattresses are crazy. People will comparison shop, not realizing that many of the stores are subsidiaries of the same company. Stores often don't have the exact mattress (different models at different stores making pricing matching impossible) so you're down to making gut decisions.

Truth and reality have a liberal bias.