I recently picked up a Yubikey Neo from Amazon, jumping early on the bandwagon of U2F for Google.

2014-11-18 14.57.31

After a few weeks I am pleased report that it is  amazingly versatile and I have been able to do many great things with it.

I have already setup U2F with Google (replacing Authenticator altogether) which is amazing.  My WordPress site also integrates the Yubikey One-Time-Password scheme (which is frustrating to get working when I did it, more on that below).  I have also replaced the Authenticator App on my phone with the YubiAuth App.  They do the same thing, except with one major difference: Authenticator shows codes immediately; YubiAuth does not show codes until you tap the YubiKey to your phone (with NFC enabled).  This means codes aren’t available to just anyone.  As an added bonus, since the auths are stored on the YubiKey you don’t need to worry about losing your phone and losing access.  Get a new phone, install the YubiAuth app, tap your Yubikey, boom, codes are available.  It’s a big relief for me since rooting a phone to install a Titanium Backup copy of Google Authenticator is always step one when I get a new phone.  Don’t need to worry about that anymore! Score!

The configuration tools aren’t quite there yet.  When I first wrote this, the tools were limited in their scope until you went to the command line versions.  For example, the Yubikey supports OTP, Smart Card, and U2F.  It doesn’t support all three simultaneously nor natively.  Using the basic GUI tools you cannot enable U2F and OTP simultaneously.  That being said, using the command line tool allows you to enable mode 6 which is all three modes at the same time.  It’s a little confusing, and sometimes frustrating (especially when trying to set up SmartCard or OTP and realizing being in mode 6 prevents enrolling almost all the time) but once you get the knack of it, things work very well.

The Yubikey system integrates fairly well with LastPass (as reported by Nick) and does well with Dashlane as well (in that the YubiAuth app replaced Google Authenticator for new device enrollment in my Dashlane account).  I used it to sign in to my desktop briefly, but it didn’t work the way I wanted and prevents RDP as far as I can tell.  The Yubikey must be present in the system for you to login, but it still requires your Windows password to be entered.  I was hoping that merely putting in the Yubikey would allow me to login (or pressing the OTP generator would log me in).  You CANNOT log in to the system enrolled with their login system unless the key is present.  No more RDP or TeamViewer access meant it just wasn’t viable for me.  Still, I could see it being used at work (though enrolling for a domain user was damn tricky since the program doesn’t sort the usernames in any semblance of an order).

My one real complaint about the Yubikey was the case they sent; namely the lack of a case.  They ship the Yubikey in a small envelope made of a flexible plastic type material, which isn’t really suitable for holding the unit on a keychain (which is where it’s basically designed to go).  I know they claim that it’s made of super resilient materials, but I am trusting my virtual identity to the device, and if it fails then I am in DEEP trouble (I am still keeping a backup of my Google Authenticator and also leaving back-doors into systems so that I can get back in if shit hits the fan).

That being said, I did also design a cool, simple case for the Yubikey, which is available on Thingiverse here.  If you have a Makerbot, the STL file is available which will allow you to import it directly into Makerware.  If you have another 3D Printer I have also included the SKP file (Sketchup) which should get you in the right direction for printing it.  The model was made with help of the NetFabb Model Repair Service, a Pittsburgh Caliper, and a lot of time on my end. 🙂

So, if you’re security minded I highly recommend you pickup one of the Yubikey line and get your accounts well secured. 🙂

I don’t care if you landed a spacecraft on a comet, your shirt is sexist and ostracizing | The Verge.

I speak of course to the people who wrote this atrocious article on The Verge, which I regrettably linked to above so you don’t think I’m sort of insane person.

Matt Taylor, a scientist and engineer at the European Space Agency, is being harassed and harangued by the internet over his choice of clothing during the airing of the landing.  Congratulations on taking what should have been a day of celebration and science and instead making a grown man cry, feeling like his accomplishments will somehow be tarnished for eternity for what he chose to work that day (a shirt that designed and made for him by a woman, mind you).

Congratulations, you are what is wrong with this world.

You, who instead of celebrating a massive accomplishment, decide to attack him for, really, no good reason.

You people who probably feel that the true determination of professionalism is how much you spent on your suit, tie, and shoes (instead of, rightly, how much work you can get done and how well you did that work) are exactly what is wrong with society today.

You do not look at the body of work that someone has provided to a field.  You look and say, huh, I don’t like his shirt, RUIN HIS EXISTENCE.

I am sickened.  This was supposed to be a time of celebration for the scientific community.  Instead of spending time accomplishing science and working hard to further humanity, he is spending time apologizing and trying to do damage control OVER A SHIRT.  DO YOU REALIZE JUST HOW INSANE THIS SOUNDS?!

I am just at a loss.  It’s absurd.

Less than a week later, try to Google Matt Taylor.  Go ahead.  You know what Google recommends?   Not “Matt Taylor Philae”, not “Matt Taylor Rosetta”, not “Matt Taylor Comet”, not even “Matt Taylor Scientist”.  “Matt Taylor Shirt” is what Google recommends.  Do you realize just how ABSURD this is!?

There are plenty of things that need to be addressed about humanity, but PLEASE stop MANUFACTURING hatred over stupid shit!

It’s unbelievable.

And you’re holding us all back.

And you should be ASHAMED of yourself for dwarfing his scientific mastery  and accomplishments by a SHIRT.

Ugh.

And addressing the marvelous people at The Verge, “I don’t care if you wrote a shit-tier bait article, your site (and the article) is atrocious and you should feel bad.”

Alternatively, once you’ve landed something on a comet, you can complain.  Until then, shut the fuck up, leave the man alone, and let him get back to SCIENCE.

Borderlands: The Pre-Sequel. More of the same old stuff from our friends at 2K Games. 4 (or 5) New Playables. Bajillions more guns. A new aspect of the original story. SPOILERS ABOUND, please don’t read too much further if you’re interested in the story.

Borderlands: The Pre-Sequel (from now forward, TPS) is the 3rd game in the Borderlands series, but pretty much takes place in between the first (Borderlands) and the second (Borderlands 2) games.  It takes us on a journey through the world of Elpis, Pandora’s moon, and Helios, Hyperion’s station above Pandora, so we can witness the rise of Handsome Jack and Hyperion as a whole.

It is an interesting play through for anyone who has completed the first two games and has developed an (understandable) hatred of Handsome Jack.  SPOILER ALERT! Handsome Jack isn’t a heinous asshole in TPS, at least to start.  He starts off in the game literally saving your hide (something that Lilith is frustratingly confused about) and trying his best to save the lives of the people of Elpis.  His hatred of ClapTrap units remains in full swing.

Traveling and fighting on the moon of Pandora, Elpis, starts off with a frustrating and new mechanic: O2.  Elpis has no oxygen, and when you first arrive you find yourself suffocating.  This entertaining character, Janey, introduces herself as she saves you from asphyxiating in the vacuum of the moon.  She tells you that you’ll need an O2 kit, called an OZ Kit by the locals.  The OZ Kit also has the added benefit of granting you a unique ability: BUTT SLAM!  Yes, butt slam.  Jump into the air (double tap jump to float or get higher) then hold the crouch key to slam into the ground and cause a shock wave of varying types of damage.  It replaces the relic slot (that granted special add-ons to your characters in the first and second games) which is kind of frustrating but also very entertaining.  My roommate and I spent hours just slamming enemies in the game.  BUTT SLAM!

As for the playable classes, there are 4 (with a 5th planned to be released on Nov 11th), each with a different special:

There is Athena, an ex-Crimson Lance assassin armed with the Apsis shield special.  You bring up the shield, it absorbs damage from your enemies and then you fling the shield at them and it explodes spectacularly.  It’s difficult to aim the shield to start but once you pick it up properly.

Then there is Wilhelm,  a Hyperion scientist/engineer with robotic augments.  Yes, it is the same Wilhelm from Borderlands 2, before you ask.  Wilhelm is equipped two drones: Wolf and Saint. Saint will heal you while Wolf will shoot enemies for you.  They are super useful early on and in boss fights.

Then there is Nisha, a lawbringer of sorts.  She is armed with a special ability that locks onto targets to allow you to get easy kills.   That is to say, you activate her special ability and your cursor will home in on any nearby targets.  Pull the trigger and watch the heads fly!

Finally there is Claptrap AKA Fragtrap.  Claptrap’s special is wildly unpredictable and fun regardless.  There are too many things to list for Claptrap’s special, which basically gives random buffs to all people nearby.  You can view them all here.

You can get a quick overview of the Action Skills by watching this awesome YouTube clip: YouTube!

Admittedly I could have recorded this myself, but honestly I am tired, just recovering from a cold, and Halo: Master Chief Collection just came out.  Please cut me a break.

Badass ranks are still present in TPS, and just as useful as ever.  It’s great to be able to upgrade all your characters at once (and cool to see a level 1 fly through the early game!).  Baddass ranks are basically nods from the developers to gamers, rewards for repeat playthroughs and making more characters.

Golden keys,  are just as plentiful as ever thanks to the generous devs.  Make sure you grab them early and often.  They make grabbing cool loot super easy.  I use two or three every 5 character levels to make sure the loot stays relevant.  I then stow it in the stash and bank to trade it around.  Make sure you do it with other people around so you can trade.

Overall Thoughts

TPS is a must-have for fans of the Borderlands Series and completionist fanatics.  That being said, it’s a lot of the same-old, same-old stuff.  Go to location, kill bad guys, collect items, then pray that the loot fairy smiled upon you and your party.  Once you reach the end-game (which takes a play-through or two) it rapidly becomes a fight for the best guns and gear.

The game is not super difficult, as evidenced by the fact that my roommate and I defeated both the end game level and the repeat level in our first goes.  You will fall down a lot (probably) but Fight For Your Life is a saving grace and an easy way to keep yourself in the fight.  You can still be picked up by your allies (both using the normal method which is slow, and alternatively using OZ Kit O2 supplies which is super fast).

The game can be frustrating however, as evidenced by one of the quests to collect 50 white-grade weapons and turn them in (which was… SO draining). and random encounters with bosses that are seemingly too difficult for their level.  These events are largely few and far between however.

Visually, the game is just as beautiful as I remember it being in Borderlands 2.  There is something extra there though, and we haven’t figured out what it is yet (since my roommate has times when the game chugs along as opposed to flying through Borderlands 2).   The effects for fights and elemental damage are visually satisfying (corrosive damage is goopy and green, frost damage is a light blue, explosive damage is EXPLOSIONSSSSSSSSSSSS, etc).  The style is very cartoon-y and entertaining.  I must say it’s one of my favorite aspects of the game, just sitting there and driving around and looking at all the detail and effort they put into the styles and depth aspects.

Overall, I’d give TPS an 8/10.  TPS is a very fun game, but it’s certainly a simple re-hash of the same old formula of Borderlands and Borderlands 2.  There are new character classes, locations, and a story (as well as a few game play mechanics) but it’s all boiling down to go to location, kill things, collect loot, bring it back eventually devolving into a loot fest.  It is fun for sure, but it can surely become a slow haul grind.

But then again, HEY LOOK ORANGE LOOT!

And that is all there is to it.

Game on people, and I’ll see you on Elpis.

Wilhelm Badass Ranks

Find me on Steam here, and let’s play some! 😀

Holy Shit We Landed a Spacecraft on a Comet | WIRED.

YAY SCIENCE!

Also, America take note: Europe is surpassing our space program.  Sure, we landed on the moon (YAY! MOON!) but the moon is a large body that has a relatively uniform and stable orbit.

They landed on a COMET.  A relatively small comet, at that.  Sure, they had some problems, like the landing grapple harpoons haven’t fired.  But it’s there! Doing SCIENCE.

Are you REALLY telling me that if an Armageddon scenario happens we’re gonna depend on Europe?  I think we can do better America.  I know we can do better.

Let’s get on that right away.

Update: If you haven’t seen this GIF, you really should look.  It shows just how much science and planning was put into getting that lander there.  Fans of Kerbal Space Program take note: this is what we simulate!

The Lander as It Travels Through the Solar System (GIF)

avZGG4q_460sa_v1

This is more for my sake than for yours, but I am posting it here because it’s been a while since I’ve said anything.

Games To Be Reviewed!

Middle Earth: Shadow of Mordor (XBox One)
Call of Duty: Advanced Warfare (XBox One)
Borderlands: The Pre Sequel (PC)

So far I’ve only played Borderlands, but Middle Earth and the new CoD sit on my table waiting to be played.

That combined with Dragon Age: Inquisition, Halo 5, and the Halo Master Chief Collection (both XBox One titles) means November is going to be a VERY busy month.

Looking forward to it.

Also, I’ll be doing a “state of the gaming nation” post later, where I talk about what’s been going on in the gaming world lately.

Looking forward to that a lot.

Game on folks.

Game on.

Even more news: Dropbox claims that the account usernames and passwords leaked on PasteBin (see the previous article here) aren’t from Dropbox, but from unrelated services.

I still (and Dropbox does too) strongly recommend you activate 2-factor authentication.

-M

The Dropbox Blog » Blog Archive » Dropbox wasn’t hacked.

POLICE: ‘Apple Will Become The Phone Of Choice For The Pedophile’ – Business Insider.

I think I have a better title: POLICE: We don’t know how the law or technology works, BUT PEDOPHILES ARE SCARY SO THIS IS BAD

Christ and hunter.

It should not be EASY for ANYONE to get complete access to someone’s personal information on any device, let alone a cell phone.

We let you pull the wool over our eyes once, “ZOMG TERRORISTS” is not enough justification, nor is “ZOMG SAFETY”.  Not anymore.

We’ve learned, and it’s about time.

I’m usually the first one to rag on Apple, but this is a VERY smart move and I applaud them for it.

That being said, how about those bendy iPhone 6+’s? (I can’t let it all be positive…)