MU Peeves Thread

dvoraen

@Pavel I am very creeped out by this GIF for some reason.

somasatori

@dvoraen
We all live on a Yellow Submarine!

Testament

I would really love to know why my work VPN has no issue going to sites for Ares based games…so long as the http address has a .aresmush.com in the command prompt line.

And any other Ares site address that doesn’t use that my work VPN is like “OH SHIT, THAT IS A DANGEROUS SITE DON’T GO TO IT”.

I’m partly being sarcastic in this statement and I’m partly annoyed because I honestly don’t know what difference that makes.

junipersky

@Testament

Lol, my work is the opposite! If it has aresmush in the name it is an evil games link, but not? Totally cool.

Testament

@junipersky Well, now I’m even more confused.

Wizz

@Testament

…has @Faraday secretly been evil this entire time

shit-piss-love

It always blows my mind when companies don’t have a split tunnel VPN. Like, do you enjoy having all your employees eating your bandwidth with netflix and youtube steaming all day?

helvetica

@shit-piss-love said in MU Peeves Thread:

employees
netflix
all day?

bashful

omgosh who would do that

Faraday

@Wizz said in MU Peeves Thread:

…has @Faraday secretly been evil this entire time

eyes

No but really, site-specific firewalls are notoriously arbitrary.

One thing to look at is whether the site has a security certificate. Many places using an aresmush.com subdomain take advantage of the easy mode or 1click install options, which will set up HTTPS. Custom domains are more commonly on HTTP, which many browsers/VPNs will see as inherently fishy. Those are just trends though - there are custom domains with HTTPS and aresmush domains without. Depends on the game.

Some VPNs also see websockets or unconventional ports as fishy.

Others are just keyword based, so if it sees the word “GAME” in the site it may block it.

Still annoying though.

Duke Whisky

I’ve found that usually it is because GAME.aresmush is a subdomain so doesn’t flag as a new website whereas the custom URL takes a few weeks/month(s) for IT policies to allow the new website through.

Mostly because when it happens to me I get a massive warning note from IT explaining why it was flagged.

Faraday

@Whisky said in MU Peeves Thread:

whereas the custom URL takes a few weeks/month(s) for IT policies to allow the new website through.

What on earth kind of system is that IT running? Preemptively blocking ALL websites you haven’t whitelisted is some next-level draconian weirdness.

Solstice

I really need to read posts first. You put it far better a few posts back.

SpaceKhomeini

I work for a US school district, and we wholly get our filtering from third-party vendors, which is apparently a big player in the educational space. Securly, if you’re curious. It’s public knowledge anyway. Anyway, they’re supposedly widely adopted, which means they don’t really have to fucking try but don’t get me started on the general grift of this market.

The surprising thing here is I haven’t run into a single game that we block. Of course we don’t block certain sites like Steam for specific reasons.

I too am baffled by the lack of split-tunnelling here, but the teams responsible for configuring and maintaining this stuff are simultaneously overworked and a little junior.

mietze

Sometimes I want an aging/middle aging while mushing thread because dealing with hormonal issues and mushing is sometimes an annoying combo and yet if I had a dollar for every time a male presenting phb answered every criticism no matter how gently given by a female presenting person with “what are you on the rag” in the 90s I wouldn’t be stressing about putting things kids through college now. So its also a bit of an irritant to even say something like that because my 20 year old self would smack me.

Also it was mushing that first made me realize I needed bifocals for real. (Wish I hadn’t resisted as I love them!)

Duke Whisky

@Faraday said in MU Peeves Thread:

@Whisky said in MU Peeves Thread:

whereas the custom URL takes a few weeks/month(s) for IT policies to allow the new website through.

What on earth kind of system is that IT running? Preemptively blocking ALL websites you haven’t whitelisted is some next-level draconian weirdness.

I think it’s just an overcautious approach since after a month passes they aren’t blocked anymore.

Unfortunately I work in a business where people are happy to hand their passwords to Groooooogle and Fracebook.

Woo, let’s go compulsory annual phishing training \o/

Testament

@Whisky If I had to type my password in every time to our laboratory information system every time I logged into a workstation, I would likely throw a computer through the window.

junipersky

@Testament

Every. Fucking. Time. Plus the two factor verification. Which sucks for me because I don’t have my phone attached to me all the time (half my day is spent on a cart going from room to room and women pockets ~suck~ so I just can’t keep track of it!) so I am legit locked out sometimes.

SpaceKhomeini

@junipersky A friend of mine is part of a class action lawsuit with a former employer over usage of personal property for MFA.

We’ll see how it goes. Frankly, I don’t want work functionality on my personal device ever but I feel like modern workplaces let that trojan horse in a long time ago.

Tributary

@Testament I customize laboratory information systems, and one of our clients has it so that we need 2FA constantly, even though we’re on their VPN. It is insanity inducing. Go to test code, pause to do authentication, crash from minor error, repeat.

@SpaceKhomeini Yeah, it’s bold of them to assume I can fit another 2FA application on my aging personal device.

junipersky

@SpaceKhomeini

That I am super curious about how it will go! I get the need for two factor, but I hate the inconvenience.

We aren’t locked down as tight as other places are. I was recently in a training with a teacher out east who couldn’t even share/accept a share for a Google doc outside her organization.