GET https://kbin.spritesserver.nl/m/asklemmy@lemmy.world/t/7315/Tech-workers-what-did-your-IT-Security-team-do-that/comment/69458/votes/down

Response
200 OK
IP
18.191.91.147
Profiled on
Token
ec39e7

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 7.49 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.09 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
App\Entity\EntryComment {#1394
  +user: Proxies\__CG__\App\Entity\User {#1369 …}
  +entry: App\Entity\Entry {#1810 …}
  +magazine: App\Entity\Magazine {#313
    +icon: Proxies\__CG__\App\Entity\Image {#294 …}
    +name: "asklemmy@lemmy.world"
    +title: "asklemmy"
    +description: """
      A Fediverse community for open-ended, thought provoking questions\n
      -----------------------------------------------------------------\n
      \n
      ---\n
      \n
      **Rules: (interactive)**\n
      ------------------------\n
      \n
      ---\n
      \n
      1) Be nice and; have funDoxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can’t say something nice, don’t say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. [Please familiarize yourself with them](https://legal.lemmy.world/tos/)\n
      \n
      ---\n
      \n
      2) All posts must end with a '?'This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?\n
      \n
      ---\n
      \n
      3) No spamPlease do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.\n
      \n
      ---\n
      \n
      4) NSFW is okay, within reasonJust remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either [!asklemmyafterdark@lemmy.world](https://lemmy.world/c/asklemmyafterdark) or [!asklemmynsfw@lemmynsfw.com](https://lemmynsfw.com/c/asklemmynsfw). NSFW comments should be restricted to posts tagged [NSFW].\n
      \n
      ---\n
      \n
      5) This is not a support community.It is not a place for ‘how do I?’, type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to [Lemmy.world Support](https://lemmy.world/c/support) or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.\n
      \n
      ---\n
      \n
      Reminder: The [terms of service](https://legal.lemmy.world/tos/) apply here too.\n
      \n
      Partnered Communities:\n
      ----------------------\n
      \n
      [Tech Support](/c/techsupport@lemmy.world)\n
      \n
      [No Stupid Questions](/c/nostupidquestions@lemmy.world)\n
      \n
      [You Should Know](/c/youshouldknow@lemmy.world)\n
      \n
      [Reddit](/c/reddit@lemmy.world)\n
      \n
      [Jokes](/c/jokes@lemmy.world)\n
      \n
      [Ask Ouija](/c/askouija@lemmy.world)\n
      \n
      ---\n
      \n
      Logo design credit goes to: [tubbadu](/u/tubbadu@lemmy.world)\n
      \n
      ---\n
      \n
      ![](https://img.shields.io/lemmy/asklemmy%40lemmy.world?logo=lemmy&label=Total%20Subscribers)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1179
    +entryCommentCount: 42676
    +postCount: 3
    +postCommentCount: 67
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583245 {#321
      date: 2024-10-22 09:47:25.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#285 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#281 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#270 …}
    +entries: Doctrine\ORM\PersistentCollection {#228 …}
    +posts: Doctrine\ORM\PersistentCollection {#186 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#248 …}
    +bans: Doctrine\ORM\PersistentCollection {#165 …}
    +reports: Doctrine\ORM\PersistentCollection {#151 …}
    +badges: Doctrine\ORM\PersistentCollection {#129 …}
    +logs: Doctrine\ORM\PersistentCollection {#119 …}
    +awards: Doctrine\ORM\PersistentCollection {#108 …}
    +categories: Doctrine\ORM\PersistentCollection {#95 …}
    -id: 49
    +apId: "asklemmy@lemmy.world"
    +apProfileId: "https://lemmy.world/c/asklemmy"
    +apPublicUrl: "https://lemmy.world/c/asklemmy"
    +apFollowersUrl: "https://lemmy.world/c/asklemmy/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "asklemmy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583301 {#322
      date: 2024-10-22 09:48:21.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1697177027 {#316
      date: 2023-10-13 08:03:47.0 +02:00
    }
  }
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2476 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2466 …}
  +body: """
    > At the end of the day, some of us in IT security want to do the right things based in common sense but we get stymied by management decisions and precedence. Hell, I’ve brought NIST 800-63B documentation with me to check every reason why they wouldn’t budge. It’s just ingrained in them - meanwhile you look at the number of tickets for password help and password sharing violations that get reported …\n
    \n
    Paint the picture for management:\n
    \n
    At one time surgery was the purview of medieval barbers. Yes, the same barbers that cut your hair. At the time there were procedures to intentionally cause people to bleed excessively and cutting holes the body to let the one of the “4 humors” out to make the patient well again. All of this humanity arrived at with tens of thousands of years of existence on Earth. Today we look at this as uninformed and barbaric. Yet we’re doing the IT Security equivalent of those medieval barber still today. We’re bleeding our users unnecessarily with complex frequent password rotation and other bad methods *because that’s what was the standard at one time.* What’s the modern medicine version of IT Security? NIST 800-63B is a good start. I’m happy to explain whats in there. Now, do we want to keep harming our users and **wasting the company’s money** on poor efficiency or do we want to embrace the lesson *learned* from that bad past?
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 11
  +score: 0
  +lastActive: DateTime @1698166750 {#1605
    date: 2023-10-24 18:59:10.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Krudler@lemmy.world"
    "@Cqrd@lemmy.dbzer0.com"
    "@xubu@infosec.pub"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2288 …}
  +nested: Doctrine\ORM\PersistentCollection {#2166 …}
  +votes: Doctrine\ORM\PersistentCollection {#2427 …}
  +reports: Doctrine\ORM\PersistentCollection {#2426 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2488 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1841 …}
  -id: 69458
  -bodyTs: "'-63':38,207 '4':123 '800':37,206 'arriv':136 'b':39,208 'bad':184,250 'barbar':156 'barber':90,94,168 'base':19 'bleed':110,173 'bodi':116 'brought':35 'budg':51 'caus':107 'check':44 'common':21 'compani':233 'complex':178 'cut':96,113 'day':6 'decis':29 'document':40 'earth':147 'effici':238 'embrac':244 'end':3 'equival':164 'everi':45 'excess':111 'exist':145 'explain':217 'frequent':179 'get':25,74 'good':211 'hair':98 'happi':215 'harm':227 'hell':32 'help':68 'hole':114 'human':135 'humor':124 'ingrain':55 'intent':106 'keep':226 'learn':247 'lesson':246 'let':118 'look':60,150 'm':214 'make':127 'manag':28,80 'meanwhil':58 'medicin':200 'mediev':89,167 'method':185 'modern':199 'money':235 'nist':36,205 'number':63 'one':82,120,194 'paint':76 'password':67,70,180 'past':251 'patient':129 'peopl':108 'pictur':78 'poor':237 'preced':31 'procedur':104 'purview':87 're':159,172 'reason':46 'report':75 'right':17 'rotat':181 'secur':12,163,204 'sens':22 'share':71 'standard':192 'start':212 'still':169 'stymi':26 'surgeri':84 'ten':139 'thing':18 'thousand':141 'ticket':65 'time':83,101,195 'today':148,170 'uninform':154 'unnecessarili':176 'us':9 'user':175,229 've':34 'version':201 'violat':72 'want':13,224,242 'wast':231 'well':130 'what':218 'wouldn':49 'year':143 'yes':91 'yet':157"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/4779120"
  +editedAt: null
  +createdAt: DateTimeImmutable @1698166750 {#1377
    date: 2023-10-24 18:59:10.0 +02:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
App\Entity\EntryComment {#1394
  +user: Proxies\__CG__\App\Entity\User {#1369 …}
  +entry: App\Entity\Entry {#1810 …}
  +magazine: App\Entity\Magazine {#313
    +icon: Proxies\__CG__\App\Entity\Image {#294 …}
    +name: "asklemmy@lemmy.world"
    +title: "asklemmy"
    +description: """
      A Fediverse community for open-ended, thought provoking questions\n
      -----------------------------------------------------------------\n
      \n
      ---\n
      \n
      **Rules: (interactive)**\n
      ------------------------\n
      \n
      ---\n
      \n
      1) Be nice and; have funDoxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can’t say something nice, don’t say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. [Please familiarize yourself with them](https://legal.lemmy.world/tos/)\n
      \n
      ---\n
      \n
      2) All posts must end with a '?'This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?\n
      \n
      ---\n
      \n
      3) No spamPlease do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.\n
      \n
      ---\n
      \n
      4) NSFW is okay, within reasonJust remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either [!asklemmyafterdark@lemmy.world](https://lemmy.world/c/asklemmyafterdark) or [!asklemmynsfw@lemmynsfw.com](https://lemmynsfw.com/c/asklemmynsfw). NSFW comments should be restricted to posts tagged [NSFW].\n
      \n
      ---\n
      \n
      5) This is not a support community.It is not a place for ‘how do I?’, type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to [Lemmy.world Support](https://lemmy.world/c/support) or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.\n
      \n
      ---\n
      \n
      Reminder: The [terms of service](https://legal.lemmy.world/tos/) apply here too.\n
      \n
      Partnered Communities:\n
      ----------------------\n
      \n
      [Tech Support](/c/techsupport@lemmy.world)\n
      \n
      [No Stupid Questions](/c/nostupidquestions@lemmy.world)\n
      \n
      [You Should Know](/c/youshouldknow@lemmy.world)\n
      \n
      [Reddit](/c/reddit@lemmy.world)\n
      \n
      [Jokes](/c/jokes@lemmy.world)\n
      \n
      [Ask Ouija](/c/askouija@lemmy.world)\n
      \n
      ---\n
      \n
      Logo design credit goes to: [tubbadu](/u/tubbadu@lemmy.world)\n
      \n
      ---\n
      \n
      ![](https://img.shields.io/lemmy/asklemmy%40lemmy.world?logo=lemmy&label=Total%20Subscribers)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1179
    +entryCommentCount: 42676
    +postCount: 3
    +postCommentCount: 67
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583245 {#321
      date: 2024-10-22 09:47:25.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#285 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#281 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#270 …}
    +entries: Doctrine\ORM\PersistentCollection {#228 …}
    +posts: Doctrine\ORM\PersistentCollection {#186 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#248 …}
    +bans: Doctrine\ORM\PersistentCollection {#165 …}
    +reports: Doctrine\ORM\PersistentCollection {#151 …}
    +badges: Doctrine\ORM\PersistentCollection {#129 …}
    +logs: Doctrine\ORM\PersistentCollection {#119 …}
    +awards: Doctrine\ORM\PersistentCollection {#108 …}
    +categories: Doctrine\ORM\PersistentCollection {#95 …}
    -id: 49
    +apId: "asklemmy@lemmy.world"
    +apProfileId: "https://lemmy.world/c/asklemmy"
    +apPublicUrl: "https://lemmy.world/c/asklemmy"
    +apFollowersUrl: "https://lemmy.world/c/asklemmy/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "asklemmy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583301 {#322
      date: 2024-10-22 09:48:21.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1697177027 {#316
      date: 2023-10-13 08:03:47.0 +02:00
    }
  }
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2476 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2466 …}
  +body: """
    > At the end of the day, some of us in IT security want to do the right things based in common sense but we get stymied by management decisions and precedence. Hell, I’ve brought NIST 800-63B documentation with me to check every reason why they wouldn’t budge. It’s just ingrained in them - meanwhile you look at the number of tickets for password help and password sharing violations that get reported …\n
    \n
    Paint the picture for management:\n
    \n
    At one time surgery was the purview of medieval barbers. Yes, the same barbers that cut your hair. At the time there were procedures to intentionally cause people to bleed excessively and cutting holes the body to let the one of the “4 humors” out to make the patient well again. All of this humanity arrived at with tens of thousands of years of existence on Earth. Today we look at this as uninformed and barbaric. Yet we’re doing the IT Security equivalent of those medieval barber still today. We’re bleeding our users unnecessarily with complex frequent password rotation and other bad methods *because that’s what was the standard at one time.* What’s the modern medicine version of IT Security? NIST 800-63B is a good start. I’m happy to explain whats in there. Now, do we want to keep harming our users and **wasting the company’s money** on poor efficiency or do we want to embrace the lesson *learned* from that bad past?
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 11
  +score: 0
  +lastActive: DateTime @1698166750 {#1605
    date: 2023-10-24 18:59:10.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Krudler@lemmy.world"
    "@Cqrd@lemmy.dbzer0.com"
    "@xubu@infosec.pub"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2288 …}
  +nested: Doctrine\ORM\PersistentCollection {#2166 …}
  +votes: Doctrine\ORM\PersistentCollection {#2427 …}
  +reports: Doctrine\ORM\PersistentCollection {#2426 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2488 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1841 …}
  -id: 69458
  -bodyTs: "'-63':38,207 '4':123 '800':37,206 'arriv':136 'b':39,208 'bad':184,250 'barbar':156 'barber':90,94,168 'base':19 'bleed':110,173 'bodi':116 'brought':35 'budg':51 'caus':107 'check':44 'common':21 'compani':233 'complex':178 'cut':96,113 'day':6 'decis':29 'document':40 'earth':147 'effici':238 'embrac':244 'end':3 'equival':164 'everi':45 'excess':111 'exist':145 'explain':217 'frequent':179 'get':25,74 'good':211 'hair':98 'happi':215 'harm':227 'hell':32 'help':68 'hole':114 'human':135 'humor':124 'ingrain':55 'intent':106 'keep':226 'learn':247 'lesson':246 'let':118 'look':60,150 'm':214 'make':127 'manag':28,80 'meanwhil':58 'medicin':200 'mediev':89,167 'method':185 'modern':199 'money':235 'nist':36,205 'number':63 'one':82,120,194 'paint':76 'password':67,70,180 'past':251 'patient':129 'peopl':108 'pictur':78 'poor':237 'preced':31 'procedur':104 'purview':87 're':159,172 'reason':46 'report':75 'right':17 'rotat':181 'secur':12,163,204 'sens':22 'share':71 'standard':192 'start':212 'still':169 'stymi':26 'surgeri':84 'ten':139 'thing':18 'thousand':141 'ticket':65 'time':83,101,195 'today':148,170 'uninform':154 'unnecessarili':176 'us':9 'user':175,229 've':34 'version':201 'violat':72 'want':13,224,242 'wast':231 'well':130 'what':218 'wouldn':49 'year':143 'yes':91 'yet':157"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/4779120"
  +editedAt: null
  +createdAt: DateTimeImmutable @1698166750 {#1377
    date: 2023-10-24 18:59:10.0 +02:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
App\Entity\EntryComment {#1394
  +user: Proxies\__CG__\App\Entity\User {#1369 …}
  +entry: App\Entity\Entry {#1810 …}
  +magazine: App\Entity\Magazine {#313
    +icon: Proxies\__CG__\App\Entity\Image {#294 …}
    +name: "asklemmy@lemmy.world"
    +title: "asklemmy"
    +description: """
      A Fediverse community for open-ended, thought provoking questions\n
      -----------------------------------------------------------------\n
      \n
      ---\n
      \n
      **Rules: (interactive)**\n
      ------------------------\n
      \n
      ---\n
      \n
      1) Be nice and; have funDoxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can’t say something nice, don’t say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. [Please familiarize yourself with them](https://legal.lemmy.world/tos/)\n
      \n
      ---\n
      \n
      2) All posts must end with a '?'This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?\n
      \n
      ---\n
      \n
      3) No spamPlease do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.\n
      \n
      ---\n
      \n
      4) NSFW is okay, within reasonJust remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either [!asklemmyafterdark@lemmy.world](https://lemmy.world/c/asklemmyafterdark) or [!asklemmynsfw@lemmynsfw.com](https://lemmynsfw.com/c/asklemmynsfw). NSFW comments should be restricted to posts tagged [NSFW].\n
      \n
      ---\n
      \n
      5) This is not a support community.It is not a place for ‘how do I?’, type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to [Lemmy.world Support](https://lemmy.world/c/support) or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.\n
      \n
      ---\n
      \n
      Reminder: The [terms of service](https://legal.lemmy.world/tos/) apply here too.\n
      \n
      Partnered Communities:\n
      ----------------------\n
      \n
      [Tech Support](/c/techsupport@lemmy.world)\n
      \n
      [No Stupid Questions](/c/nostupidquestions@lemmy.world)\n
      \n
      [You Should Know](/c/youshouldknow@lemmy.world)\n
      \n
      [Reddit](/c/reddit@lemmy.world)\n
      \n
      [Jokes](/c/jokes@lemmy.world)\n
      \n
      [Ask Ouija](/c/askouija@lemmy.world)\n
      \n
      ---\n
      \n
      Logo design credit goes to: [tubbadu](/u/tubbadu@lemmy.world)\n
      \n
      ---\n
      \n
      ![](https://img.shields.io/lemmy/asklemmy%40lemmy.world?logo=lemmy&label=Total%20Subscribers)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1179
    +entryCommentCount: 42676
    +postCount: 3
    +postCommentCount: 67
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583245 {#321
      date: 2024-10-22 09:47:25.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#285 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#281 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#270 …}
    +entries: Doctrine\ORM\PersistentCollection {#228 …}
    +posts: Doctrine\ORM\PersistentCollection {#186 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#248 …}
    +bans: Doctrine\ORM\PersistentCollection {#165 …}
    +reports: Doctrine\ORM\PersistentCollection {#151 …}
    +badges: Doctrine\ORM\PersistentCollection {#129 …}
    +logs: Doctrine\ORM\PersistentCollection {#119 …}
    +awards: Doctrine\ORM\PersistentCollection {#108 …}
    +categories: Doctrine\ORM\PersistentCollection {#95 …}
    -id: 49
    +apId: "asklemmy@lemmy.world"
    +apProfileId: "https://lemmy.world/c/asklemmy"
    +apPublicUrl: "https://lemmy.world/c/asklemmy"
    +apFollowersUrl: "https://lemmy.world/c/asklemmy/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "asklemmy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583301 {#322
      date: 2024-10-22 09:48:21.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1697177027 {#316
      date: 2023-10-13 08:03:47.0 +02:00
    }
  }
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2476 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2466 …}
  +body: """
    > At the end of the day, some of us in IT security want to do the right things based in common sense but we get stymied by management decisions and precedence. Hell, I’ve brought NIST 800-63B documentation with me to check every reason why they wouldn’t budge. It’s just ingrained in them - meanwhile you look at the number of tickets for password help and password sharing violations that get reported …\n
    \n
    Paint the picture for management:\n
    \n
    At one time surgery was the purview of medieval barbers. Yes, the same barbers that cut your hair. At the time there were procedures to intentionally cause people to bleed excessively and cutting holes the body to let the one of the “4 humors” out to make the patient well again. All of this humanity arrived at with tens of thousands of years of existence on Earth. Today we look at this as uninformed and barbaric. Yet we’re doing the IT Security equivalent of those medieval barber still today. We’re bleeding our users unnecessarily with complex frequent password rotation and other bad methods *because that’s what was the standard at one time.* What’s the modern medicine version of IT Security? NIST 800-63B is a good start. I’m happy to explain whats in there. Now, do we want to keep harming our users and **wasting the company’s money** on poor efficiency or do we want to embrace the lesson *learned* from that bad past?
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 11
  +score: 0
  +lastActive: DateTime @1698166750 {#1605
    date: 2023-10-24 18:59:10.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Krudler@lemmy.world"
    "@Cqrd@lemmy.dbzer0.com"
    "@xubu@infosec.pub"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2288 …}
  +nested: Doctrine\ORM\PersistentCollection {#2166 …}
  +votes: Doctrine\ORM\PersistentCollection {#2427 …}
  +reports: Doctrine\ORM\PersistentCollection {#2426 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2488 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1841 …}
  -id: 69458
  -bodyTs: "'-63':38,207 '4':123 '800':37,206 'arriv':136 'b':39,208 'bad':184,250 'barbar':156 'barber':90,94,168 'base':19 'bleed':110,173 'bodi':116 'brought':35 'budg':51 'caus':107 'check':44 'common':21 'compani':233 'complex':178 'cut':96,113 'day':6 'decis':29 'document':40 'earth':147 'effici':238 'embrac':244 'end':3 'equival':164 'everi':45 'excess':111 'exist':145 'explain':217 'frequent':179 'get':25,74 'good':211 'hair':98 'happi':215 'harm':227 'hell':32 'help':68 'hole':114 'human':135 'humor':124 'ingrain':55 'intent':106 'keep':226 'learn':247 'lesson':246 'let':118 'look':60,150 'm':214 'make':127 'manag':28,80 'meanwhil':58 'medicin':200 'mediev':89,167 'method':185 'modern':199 'money':235 'nist':36,205 'number':63 'one':82,120,194 'paint':76 'password':67,70,180 'past':251 'patient':129 'peopl':108 'pictur':78 'poor':237 'preced':31 'procedur':104 'purview':87 're':159,172 'reason':46 'report':75 'right':17 'rotat':181 'secur':12,163,204 'sens':22 'share':71 'standard':192 'start':212 'still':169 'stymi':26 'surgeri':84 'ten':139 'thing':18 'thousand':141 'ticket':65 'time':83,101,195 'today':148,170 'uninform':154 'unnecessarili':176 'us':9 'user':175,229 've':34 'version':201 'violat':72 'want':13,224,242 'wast':231 'well':130 'what':218 'wouldn':49 'year':143 'yes':91 'yet':157"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/4779120"
  +editedAt: null
  +createdAt: DateTimeImmutable @1698166750 {#1377
    date: 2023-10-24 18:59:10.0 +02:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED edit 
App\Entity\Magazine {#313
  +icon: Proxies\__CG__\App\Entity\Image {#294 …}
  +name: "asklemmy@lemmy.world"
  +title: "asklemmy"
  +description: """
    A Fediverse community for open-ended, thought provoking questions\n
    -----------------------------------------------------------------\n
    \n
    ---\n
    \n
    **Rules: (interactive)**\n
    ------------------------\n
    \n
    ---\n
    \n
    1) Be nice and; have funDoxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can’t say something nice, don’t say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. [Please familiarize yourself with them](https://legal.lemmy.world/tos/)\n
    \n
    ---\n
    \n
    2) All posts must end with a '?'This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?\n
    \n
    ---\n
    \n
    3) No spamPlease do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.\n
    \n
    ---\n
    \n
    4) NSFW is okay, within reasonJust remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either [!asklemmyafterdark@lemmy.world](https://lemmy.world/c/asklemmyafterdark) or [!asklemmynsfw@lemmynsfw.com](https://lemmynsfw.com/c/asklemmynsfw). NSFW comments should be restricted to posts tagged [NSFW].\n
    \n
    ---\n
    \n
    5) This is not a support community.It is not a place for ‘how do I?’, type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to [Lemmy.world Support](https://lemmy.world/c/support) or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.\n
    \n
    ---\n
    \n
    Reminder: The [terms of service](https://legal.lemmy.world/tos/) apply here too.\n
    \n
    Partnered Communities:\n
    ----------------------\n
    \n
    [Tech Support](/c/techsupport@lemmy.world)\n
    \n
    [No Stupid Questions](/c/nostupidquestions@lemmy.world)\n
    \n
    [You Should Know](/c/youshouldknow@lemmy.world)\n
    \n
    [Reddit](/c/reddit@lemmy.world)\n
    \n
    [Jokes](/c/jokes@lemmy.world)\n
    \n
    [Ask Ouija](/c/askouija@lemmy.world)\n
    \n
    ---\n
    \n
    Logo design credit goes to: [tubbadu](/u/tubbadu@lemmy.world)\n
    \n
    ---\n
    \n
    ![](https://img.shields.io/lemmy/asklemmy%40lemmy.world?logo=lemmy&label=Total%20Subscribers)
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 1179
  +entryCommentCount: 42676
  +postCount: 3
  +postCommentCount: 67
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729583245 {#321
    date: 2024-10-22 09:47:25.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#285 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#281 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#270 …}
  +entries: Doctrine\ORM\PersistentCollection {#228 …}
  +posts: Doctrine\ORM\PersistentCollection {#186 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#248 …}
  +bans: Doctrine\ORM\PersistentCollection {#165 …}
  +reports: Doctrine\ORM\PersistentCollection {#151 …}
  +badges: Doctrine\ORM\PersistentCollection {#129 …}
  +logs: Doctrine\ORM\PersistentCollection {#119 …}
  +awards: Doctrine\ORM\PersistentCollection {#108 …}
  +categories: Doctrine\ORM\PersistentCollection {#95 …}
  -id: 49
  +apId: "asklemmy@lemmy.world"
  +apProfileId: "https://lemmy.world/c/asklemmy"
  +apPublicUrl: "https://lemmy.world/c/asklemmy"
  +apFollowersUrl: "https://lemmy.world/c/asklemmy/followers"
  +apInboxUrl: "https://lemmy.world/inbox"
  +apDomain: "lemmy.world"
  +apPreferredUsername: "asklemmy"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1729583301 {#322
    date: 2024-10-22 09:48:21.0 +02:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1697177027 {#316
    date: 2023-10-13 08:03:47.0 +02:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS DENIED 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details