As a parent, I am given the same exact treatment as I was at the same company before. I already was a flex worker in the sense of WFH or office is entirely up to me (except when I need to be somewhere, but the need is the key), if I take my child to a doctors appointment, I am using my sick time which is allocated to all employees equally. My insurance is arguably a “better deal” since the “family plan” cost doesn’t change when you add another dependent vs if it’s just you and your spouse.

I would ask what these people think when they get “extra flexibility” when they have an aging parent or sick spouse they are responsible or assisting the care of? Is that flexibility okay, simply because having a child is a choice, and having a parent is not? Then what about your spouse?

I agree with others in this thread that are suggesting these people don’t really care about flexibility, they just want to take it away from the parents that use it or need it.

Find someone in telco, wouldn’t be fun but should be possible

Every hardware based key I ever used also required PIN, but as far as expense and backups, yes, for personal use the cost generally may not be justified. I got all my personal ones as a bundle that was on sale. For work I would argue that some businesses can easily justify the cost to create a rotating stock of hardware keys to deal with lost keys. Generally in that environment you have centralized PKI, where you can revoke the certificate on the lost key and then issue a new certificate on a new hardware key. This doesn’t help for all sign in methods tied to hardware keys, but can be very practical when implemented right.

I also agree on TOTP as the ultimate generic 2FA method, with several worsening options until the despised email or sms 2FA. I will also add that you can setup TOTP on modern hardware keys, where you must insert and complete PIN entry. The inconvenience is that you must have all your keys and password manager available at setup time for places that don’t support multiple TOTP codes.

I read on something else that a second craft landed safely.

I love this sabotage. Has this worked against anyone that you know of yet?

I use Frigate and HomeAssistant, they are on different hosts and the only port allowed from Frigate to HomeAssistant is the non-auth api port. For normal users using Frigate, I use an Oauth2-proxy instance on the same host (same compose) as Frigate tied to a third host with keycloak. go2rtc is on the Frigate host, but it only talks to Frigate and the cameras themselves. You can also access go2rtc from outside if you want to access the streams directly but your HomeAssistant does not need too. I find that this is better than the cameras directly as the processing is not really meant for a whole bunch of streams at once.

I followed docs for the HomeAssistant to Frigate stuff with the GIF notifications and it is working fine. I also use the Frigate integration (using HACS) so maybe there is a lot done for me.