asklemmy

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

coffee_poops, in Tech workers - what did your IT Security team do that made your life hell and had no practical benefit?

Password rotation.

Taringano,

Also complex and random requirements for passwords

BradleyUffner,

“your password may not start with a special character” (rage)

Nicadimos,

As a security guy - as soon as I can get federal auditors to agree, I’m getting rid of password expiration.

The main problem is they don’t audit with logic. It’s a script and a feeling. No password expiration FEELS less secure. Nevermind the literal years of data and research. Drives me nuts.

coffee_poops,

It’s counterintuitive. Drives people to use less secure passwords that they’re likely to reuse or to just increment; Password1, Password2, etc.

commandar,

Cite NIST SP 800-63B.

Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or prohibiting consecutively repeated characters) for memorized secrets. Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.

pages.nist.gov/800-63-3/sp800-63b.html

I’ve successfully used it to tell auditors to fuck off about password rotation in the healthcare space.

Now, to be in compliance with NIST guidelines, you do also need to require MFA. This document is what federal guidelines are based on, which is why you’re starting to see Federal gov websites require MFA for access.

Either way, I’d highly encourage everyone to give the full document a read through. Not enough people are aware of it and this revision was shockingly reasonable when it came out a year or two ago.

serial_crusher, in Tech workers - what did your IT Security team do that made your life hell and had no practical benefit?
@serial_crusher@lemmy.basedcount.com avatar

Blocked the OWASP web site because it was categorized as “hacking materials”.

banneryear1868,

My favorite filter was “distasteful,” for a sysadmin forum page or reddit thread that had what I hoped would be relevant information.

Amends1782,

That is so retarded

Joker, in What are some modern bullshit jobs?

Anything in the online sports betting space. Addicts, scumbags, degenerates, and the people who make money off them.

AlmightySnoo, (edited ) in Do you know of any obscure useful websites?
@AlmightySnoo@lemmy.world avatar

live.sympy.org

It’s basically an interactive Python session using a Python interpreter compiled to WebAssembly and which then runs locally on your device via your browser without having to install anything on your end.

It’s very cool to check some calculation out very quickly on your phone or tablet.

https://lemmy.world/pictrs/image/6bca8800-2187-486b-83a2-20d2ecc106f3.png

Or if you want a full local Jupyterlab experience using the same WebAssembly tech: jupyterlite.readthedocs.io/en/…/index.html (based on the JupyterLite project: github.com/jupyterlite/jupyterlite)

minyakcurry,

This is super helpful!

Wirrvogel, in You just died. Instead of heaven and god(s), you wake up in a white room and an all-powerful sentient AI greets you with fascination and surprise. It says that you are the first... (read further)

ADHD - As usual I forgot something important, like to stay dead.

OsrsNeedsF2P, in Mother-in-Law bought family tickets to Medieval Times for tonight, but they're on strike and scabs are doing the show...

Wear a pro-union shirt or go in with a sign. No need to fight with your family, because your family isn’t really the problem at hand right now.

Nemo, in Am I the only one getting agitated by the word AI?

AI isn’t reserved for a human-level general intelligence. The computer-controlled avatars in some videogames are AI. My phone’s text-to-speech is AI. And yes, LLMs, like the smaller Markov-chain models before them, are AI.

Kyrgizion, in What is a niche interest or hobby you'd personally like to see represented more on Lemmy

Ancient coins. There’s a sub on Lemmy but it’s sadly unpopulated. I miss being able to interface a bit with other collectors, but fuck my ass if I have to go back to Reddit for that.

Valmond,

I digged down in what coins (they overlapped usually IIRC) had the highest probability of have being manipulated by jesus or the supposed apostles. Wasn’t that expensive if my memory is right to get a bunch with a high probability.

Kyrgizion,

In that case you’ll be looking at Judean Prutahs or Leptons (the fabled “widow’s mite”), and denarii of Tiberius which are known as “tribute pennies”. Most of them are quite affordable if not incredibly impressive.

Diabolo96, (edited ) in Are Americans more prone to conspiracy theories than people in other countries?

The Simple answer is No. Every country has its fair share of loud and dumb.

anarchy79, (edited )
@anarchy79@lemmy.world avatar

The complicated answer is, the less education and the more propaganda, the more likely you are to believe dumb shit.

Nemo, in You have a magic pill, which de-ages you by 20 years. You can take it once in your life only, so long as you are at least 20. What age — past, current or future — do you reckon is best to take it?

No earlier than 45. Otherwise you’re headed back into territory where your body and brain are still developing – fuck with that and you might not feel right in your own body.

HonoraryMancunian,

Good shout

otp,

Yeah, it’s gotta be in the late 40’s.

By then, you’ve got all the aches and pains, and you’ll know better to take care of things like your posture! Lol

Vanth, in What is it that makes a grand piano sound better than an upright piano?
@Vanth@reddthat.com avatar

The size. Longer pianos, upright < baby grand < concert grand allow for longer strings and larger vibrating surfaces, meaning richer sounds and less opportunity for undesirable harmonics.

Grands also have more space for better mechanical apparatus from the keys to the hammers striking the strings.

And a grand having the cabinet with strings and sounding boards open to the audience sounds better than an upright sending sound into a wall.

user1234, in What is this wire for?

As many have said, that’s an IR receiver. That specific model commonly came with Hauppauge TV tuner cards.

acceptable_pumpkin,

Wow, I hadn’t heard that name in so long. I just remembered my Hauppauge TV tuner I had back in the day. Felt like streaming on a computer does today.

NickwithaC,
@NickwithaC@lemmy.world avatar

You can still get them and there are still over-the-air broadcast channels. TV without a subscription, plus you can record straight to your PC.

user1234,

Yep. Used to record all sorts of TV shows on my computer using them. Though they aren’t nearly as prevalent since Internet streaming has taken over. I doubt I could pick up more than 2 or 3 channels over-the-air where I live anymore.

cashews_best_nut, in Can't we just start calling it "Formerly Twitter" instead?

Xitter. Pronounced shitter.

corsicanguppy,

Fucking brilliant.

M137,
@M137@lemmy.world avatar

This has been the most common name used for months now.

MystikIncarnate,

Does that make tweets xeets, pronounced shits?

unrelatedkeg,

Yes, yes it does. You xit xeets on the xitter.

MystikIncarnate,

Well, I hope that people xit on the xitter… Otherwise it’s not fun to clean up.

nycki, in What do normal people look at on their phones?

Advertisements.

themeatbridge, in What's the funniest mishearing of song lyrics you've had?

Hold me closer, Tony Danza…

betterdeadthanreddit, (edited )

You didn’t mishear it, the name and commonly-accepted lyrics are a retroactive fix at Mr. Danza’s request and he asks that we respect his privacy.

cheese_greater,

This one wins lol

state_electrician,
  • All
  • Subscribed
  • Moderated
  • Favorites
  • asklemmy@lemmy.world
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #