Frog inna pot

Right, then they’re opersting outside of the bounds of the Internet and should be appropriately shamed.

That sucks 🤷

The standard allows an infinite number of tokens

🫰🫰🫰

Edit: snaps

There’s a difference between FIDO2 standards, whereby Hardware Tokens, like yubikeys, are not a trap. Of course software derived passkeys are antithetical to privacy, due to their opportunities for abuse like Microsoft’s deployment of the FIDO2 standard.

Except no one in the house has an Amazon account

Comes to internet for help
Handed a path to a solution
shoots footgun

Draw it!!!

Draw a network map!!! It’s what I’ve done on every security engagement, ever. Mark out all your IP addresses, draw lines to denote the communicating RHP (random high port) against the well-known, e.g. 443/tcp HTTPs, for networks of hosts to servers. Then draw boxes around those IP spaces that are colocated on the same box. Then draw red lines perpendicular to every connection from a client to server that isn’t bounded on a single host.

The red lines denote non-localhost traffic - places to be observed, and for the most part the only IP:port assignments you should be relying on for routing.

My rec, draw the map and if that doesn’t help get back to us w it - or feel free to dm me.

Edit: I’ll find and post an example as a response this thread later.

You’ll run up into that barrier everywhere. It’s called discrimination for a reason.

People are still going to say no? It just increases the density of options.

Bro the E485 was bomb for linux. My job at the time purchased a dozen of them for infosec dev, we had gentoo built and deployable for them in about a day. Shit I still have one in the basement acting as a cluster head 😂

Yeah this is the only answer for that price