Federal worker? Shutdowns, RIFs, telework fights, and benefit questions all at once? I built FedRights™ Navigator, a free, no-login hub that turns rules into plain-language tools, calculators, and templates. Check it out and share: https://fedrights.com
#FedLife #FedRights

I let my password expire on #myPay, the U.S. government's wage payment portal, and so it prompted me to change my password on my next login.
It prompted me after I entered my username and old password, but _before_ prompting me to enter my #MFA token.
Is this behavior correct?
#2FA #infosec #poll #FedLife

One thing I've learned in the year+ I've been a fed, which I'm still bad at navigating, is that there is a formal "how things are supposed to work" structure for getting stuff done, and then there is the informal "how things ACTUALLY work" way.
I've lost count of how often I've been told, "Why didn't you just come to me about this instead of raising it in that email thread / meeting?"
I know this is true in private industry too, but it seems MUCH worse in government.
#FedLife #WorkCulture

There is no justification for my still, today, needing to explain to fed govt tech contractors and employees, "No, actually, you shouldn't rip out the OAuth auth for this API and replace it with HTTP basic auth with plaintext passwords stored unencrypted."
Perhaps the biggest barrier to building secure govt systems is the attitude that it's OK to violate any best practice if you document it and get the right people to sign off by not explaining the real risks.
#infosec #FedLife #compliance

#tfw one of your coworkers tells you conversationally that he has "figured out a way to record virtual meetings which abides by the letter and spirit of the rules," and you have to tell him no, actually, I'm pretty sure recordings of any sort violate both the letter and spirit of the rules and you need to promise me that you'll check with leadership before recording any more meetings because if you won't then I'm going to have to be a snitch and report you. *sigh*
#FedLife #infosec

In the "weird things I never would have anticipated" department, I'm traveling to DC tomorrow with _four_ laptops: USDS laptop; VA laptop; personal laptop; and old USDS laptop to return in person to IT.
Thankfully, on the way home at the end of the week I'll only have to travel with three. ;-)
#travel #FedLife