Julian GambleJun 17
Niki Tonsky
A bit of common sense for you https://tailscale.com/blog/frequent-reath-security
Frequent reauth doesn't make you more secure

Securely connect to anything on the internet with Tailscale. Built on WireGuard®️, Tailscale enables you to make finely configurable connections, secured end-to-end according to zero trust principles, between any resources on any infrastructure.

Jun 12 at 8:59pmWeb
Show threadNiki TonskyJun 12
Obligatory video
Show threadTockJun 12
@nikitonsky She's not wrong. Anguish of the world's people right here.
Show threadSara Joy Jun 15
@nikitonsky this is amazing and she's so right
Show threadKarl Voit  Jun 15
@nikitonsky Oh I wish she'd be sitting in my #pim lecture. 🤷
Show threadSteve FrenzelJun 15
@nikitonsky damn I feel her 100%
Show threadThe Animal and the MachineJun 15

@nikitonsky @VioletPixel
Changing your password every 5 minutes doesn’t make you safer. They should stop making you do this.

ThisPasswordThatIsChangedOnceAYear is many orders of magnitude more secure than an 8 character with special characters changed monthly.

Also enforcing special characters reduces the potential combinations so if that is known going in, the password is weaker. Recommending them but not enforcing them is the most secure as the attack combos are required are massive regardless of actual PW

Social engineering is the weakest part so we need easier passwords in every regard.

Minimum16NoRules is best. It’s as long as the words. Touch typists can hammer out a 24 character or long passphrase password in seconds that is basically unbreakable by current technology. So unbreakable it would take 10,000 years so an annual password change is conservative.

Show threadBarbie SchlottersteinJun 17
@nikitonsky seems to be @koehntopp related 😂
Show threadAdvanced Persistent TeapotJul 1
@nikitonsky felt this in my fuckin bones
Show threadAlpha Male Martha Stewart 🍉🌈Jul 1
@nikitonsky I mean.... she's not wrong.
Show threadNiki TonskyJul 1
@fiend_unpleasant not at all
Show threadr҉ustic cy͠be̸rpu̵nk🤠🤖Jul 1
@nikitonsky I've never felt so soothed before in my life by relating to such frustration
Show threadNathan KingJun 13
@nikitonsky Preach!
Show threadpodfeetJun 13
@nikitonsky my favorite line: “If authentication is good, then surely more authentication is better, right? Like taking vitamins — one a day is good, so twenty must be great! Except, well, that’s not how anything works.”
Show threadU.LancierJun 16
@nikitonsky If reauth-ing is necessary it screams "first time wasn't secure!". So why should a second one for the *same* be anything better?!?