My Name Does Not Fit retweeted
Please share this far and wide. As far and wide as you can. NIST Password Guidelines for 2024 are in the process of being updated.
This is a HUGE pet-peeve of mine (when vendors in particular are still operating like its 2017 and keep changing passwords every 60 days, STOP DOING THIS, it's outdated and has been shown to put you MORE at risk than less -- NIST explains why it does in this document, meticulously outlining user behavior**) so I'm sharing this in the hopes all of you will pass it along to your bosses.
The Special Publication series governing passwords is SP 800-63 "Digital Identity Guidelines".
The 2024 version is 800-63-4.
Here: pages.nist.gov/800-63-4/
The companion docs are also on that link. They are 800-63A, 800-63B and 800-63C. These are different documents for different scenarios in play at your org.
The previous update was in2020.
The changes in the 2020 version from the 2017 version were numerous but one of them was that the password verification method should NO LONGER require passwords be changed at specific intervals (i.e. every 60 days) but in the following circumstances instead:
1. After a breach/compromise
2. User request
2024 repeats this and adds a bunch more guidlines but here is a screenshot of page 13 of the new 800-63-4 (note the # 4 after it) which outlines how your systems should now and moving forward, be handling passwords.
This goes for Active Directory, too. All your systems which have passwords should align with these guidelines provided there isn't another standard or framework you must adhere to which overrules this.
Most frameworks, however, have moved away from arbitrary password resets and complexity rules.
**We cybersec researchers and hackers use wordlists from breaches in a variety of different ways. Hackers use them in tooling to crack passwords whereas researchers use breach dumps to see the kinds of passwords users are creating and the psychology behind them.
Using complexity rules gets you the user psychology of:
Password1
Password2
and so on
Use phrasing instead and allow for spaces, which is important. Humans type phrases with spaces. They also mention phish-resistant methods and most vendors are on-board with MS going to be turning off all Legacy Auth next month, across all free accounts and tenancies.
I'm so excited for the new changes!
Ok I'm off my soapbox.
Share the love! Thank you!
My Name Does Not Fit retweeted
Fact: A lot of Dutch laptops have this special tray to warm up your stroopwafel.
My Name Does Not Fit retweeted
It took three different rockets to make it to this space dinner. 🍽 🚀
ALT NASA astronauts from left Suni Williams, Tracy C. Dyson, and Jeanette Epps pose for a portrait during dinner time aboard the International Space Station's Unity module.
My Name Does Not Fit retweeted
То, что крутить педали на Schiermonnikoog будет не просто я поняла, когда возле отеля ветром перевернуло ветром в воздухе чайку
My Name Does Not Fit retweeted
-> $lmnd Q4 and FY 2023 highlights 🔥:
Topline
✅ IFP (In Force Premium) ↑20%
✅ Revenue ↑31%
✅ EU showing great momentum with 100% IFP Growth. EU Homeowners product coming soon.
Efficiency
✅ Operating expenses ↓5%
✅ LTV9 is live, lets us see deeper than ever
✅ llm.nd, our Generative AI framework, now handles ~20% of all customer emails (up from 7% last Q)
Path to profitability
✅ Ended the year with $945m in the bank vs. $942m midyear! 🤯 (Don’t expect this to continue every Q just yet)
✅ Gross Profit ↑165% 💪
✅ Gross Loss Ratio 77%, ↓12 points
✅ Adjusted EBITDA improved 44%
@Lemonade_Inc
My Name Does Not Fit retweeted
“What kind of math does your consulting involve?”
“Sometimes fancy stuff, but often high school level math.”
“Why would anyone hire a professional mathematician to do high school math?”
“Because a professional mathematician can wield high school math like a professional.”
My Name Does Not Fit retweeted
See, the thing is @CepheidNews makes this amazing TB test that can tell doctors whether a patient has TB and, if so, which antibiotics that TB is resistant to. Which is amazing…when doctors can afford to use it.
They sell it through a printer-ink business model, where the machines are cheap, but the cartridges that do the test are sold at 300% to 500% margins.
There are tens of millions of tests done per year. But many places cannot afford them. Please tweet to @CepheidNews and their parent company @DanaherCorp to tell them that it will be great for their business (which has $8B in profit, and TB tests are not a huge part of it!!) if they lowered the cost!!
I want to celebrate science, not feel like access to something that could save hundreds of thousands of lives is being denied to patients because they cannot afford the price.
My Name Does Not Fit retweeted
😍Very impressive work! This is the final nail in the coffin for #LK99 - no point wasting any more time trying to replicate the Korean paper at this point!
"Pure crystals of LK-99, synthesized by a team at the Max Planck Institute for Solid State Research in Stuttgart, Germany"
"Unlike previous synthesis attempts that relied on crucibles, the researchers used a technique called floating zone crystal growth that allowed them to avoid introducing sulfur into the reaction.
The result was a transparent purple crystal. Separated from impurities, LK-99 is not a superconductor, but an insulator with a resistance in the millions of ohms — too high to run a standard conductivity test."
nature.com/articles/d41586-0…
My Name Does Not Fit retweeted
Michael Kamen — Brazil (Geoff Muldaur — Brazil OST)
Гражданская оборона — Моя оборона
My Name Does Not Fit retweeted
There are no more borders in the European Union.
However, you will always know where the Netherlands begins.
My Name Does Not Fit retweeted
A big part of getting to this level is demonstrating considered, rational, well informed aeronautical decision making.
And detractors who claim they're troubled by having this young woman up front are demonstrating they have none of those skills.
My Name Does Not Fit retweeted
«В поджоге автозака я виноват, но не надо делать из меня убийцу», — говорил в суде отец троих детей Виталий Кольцов. Присяжные отказались признавать его виновным в покушении на жизнь 12 омоновцев за то, что он бросил в два автозака два коктейля Молотова
zona.media/article/2023/06/0…
