Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
@Froot FYI
-
@netikras good rundown.
Those anyconnect issues with routing actually to remind me of some issues I've had with using local VMs while in VPN or after using it. Best solution so far has been to reboot the machine 😀 -
@irene it does. There is no point in time from which on proprietary sw can be simply called bad. Some soft is good, some is bad. It is not a matter of 'since when'.
-
@Froot yeah, that's annoying. And rebooting is just a nasty workaround. It works, but it is hugging annoying.
-
@netikras indeed 😀
-
@620hun A trope that is off repeated, but not true. OSS is neither more or less scrutinized just because it can be. Even if it is, a piece of software is not necessarily better because more people look at it. It matters who those people are and what their motivations are. The only yardstick means anything is if the tool works for you. It doesn't matter who wrote it, how, or what flavor ice cream the developers preferred. It doesn't matter if they used waterfall or scrum or something that made sense. It doesn't matter if it was written in C# or JavaScript or pig Latin. You may revel in your edginess as you plug away on your Arch Linux distro, but you also certainly put your life into the hands of trillions of lines of proprietary code riding a train our self driving Tesla to the Starbucks where you used Apple pay to buy a drink whose name nobody knows how to pronounce.
-
@AlgoRythm it could. But it doesn't. Wasn't I clear enough with my obvious hints about openconnect?
Related Rants
This project must have taken a toll on this guy
@netikras since when does proprietary mean bad?
Lemme tell you 3 stories.
CISCO AnyConnect:
- come in to the office
- use internal resources (company newsletter, jira, etc.)
- connect to client's VPN using Cisco AnyConnect
- lose access to my company resources, because AnyConnect overwrites routing table (rather normal for VPN clients)
- issue a route command updating routing table so you could reach confluence page in the intranet
- route command executes successfully, `route -n` shows nothing has changed
- google this whole WTF case
- Cisco AnyConnect constantly overwrites OS routing table to ENFORCE you to use VPN settings and nothing else.
Sooo basically if you want to check your company's email, you have to disconnect from client's VPN, check email and reconnect again. Neat!
Can be easily resolved by using opensource VPN client -- openconnect
CISCO AnyConnect:
- get a server in your company
- connect it to client's VPN and keep the VPN running for data sync. VPN has to be UP at all times
- network glitch [uh-oh]
- VPN is no longer working, AnyConnect still believes everything is peachy. No reconnect attempts.
- service is unable to sync data w/ client's systems. Data gets outdated and eventually corrupted
OpenConnect (OSS alternative to AnyConnect) detects all network glitches, reports them to the log and attempts reconnect immediatelly. Subsequent reconnect attempts getting triggered with longer delays to not to spam network.
SYMANTEC VIP (alleged 2FA?):
- client's portal requires Sym VIP otp code to log in
- open up a browser in your laptop
- navigate to the portal
- enter your credentials
- click on a Sym VIP icon in the systray
- write down the shown otp number
- log in
umm... in what fucking way is that a secure 2FA? Everything is IN the same fucking device, a single click away.
Can be easily solved by opensource alternatives to Sym VIP app: they make HTTP calls to Symantec to register a new token and return you the whole totp url. You can convert that url to a qr code and scan it w/ your phone (e.g. Google's Authenticator). Now you have a true 2FA.
Proprietary is not always bad. There are good propr sw too. But the ones that are core to your BAU and are doing shit -- well these ARE bad. and w/o an oppurtunity to workaround/fix it yourself.
rant
oss
symantec vip
proprietary
anyconnect