Skip Navigation
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)SP
spamfaux @infosec.pub
Posts 1
Comments 5
Peach Strawberry Dry Mead
  • Nice. Good note. I’ll keep that in mind. Peach is on my list to try and brew with. I’ve also read that apricot juice is a good substitute to carry a stronger peach flavor but I’ve not had a chance to confirm that yet.

  • What are you working on Wednesday
  • Non-technical: Just shipped off a mead for a competition so today will be planning for the next batch.

    Technical: Side project web application browser puzzle/word game. First time developing something in node.js so it has become an interesting adventure in learning.

  • Florida @infosec.pub spamfaux @infosec.pub

    FutureCon Tampa

    0
    Thoughts on scheduled password changes (don’t call them rotations!)
  • I would say that password expiration and password rotation are not exactly the same thing. I think expiration has it's place when pair with login time. Such as, if a user does not log in for X amount of days - begin a timer to expire the password. But rotational password changes harm the overall security posture of the concept of password security.

    But, I agree with what @[email protected] said below, I don't think I see how the changing of a password within a password manager would fall under the harmful category. Most managers have a system to actually expedite and simplify the password change process. I don't think this needs to be used regularly but if you suspect that your account might be included in a breach or some other indication of compromise, then hit that "change me" button.

    I would argue that the article's stance on the "password manager, MFA, login" dance is the more harmful perspective. The MFA process has been significantly simplified and integrated into most login functions. We're at least beyond the dongle number generator stage of consumer MFA. The combination of MFA and password managers is the primary and most accessible solution to today's password woes.