The thing about great quotes by great people is that most of them were already great by the time they made those quotes. A lot of great quotes by unknown people have probably gone unnoticed.
| Birdsite | @0x4f47 |
| Bluesky | @0x4f47.bsky.social |
O.G. 🇺🇦🌻
- 266 Followers
- 200 Following
- 14 Posts
Recovering threat hunter.
No, I am not that OG.
NIST SP 800-63B-1: Change your password every 90 days.
...
NIST SP 800-63B-3: No periodic password change requirements.
...
NIST SP 800-63B-5: Change your password every LastPass breach.
...
NIST SP 800-63B-3: No periodic password change requirements.
...
NIST SP 800-63B-5: Change your password every LastPass breach.
I have unfounded fears about using escalators, but I am taking steps to avoid them.
Welp, I guess I know what I'm doing this holiday season. Going through all of my online accounts and changing all the passwords and recovery codes, because I don't remember if I did all of them when I ditched #LastPass and they're not making it very clear what exactly got stolen 
https://infosec.exchange/@og/109441555092278405
https://infosec.exchange/@og/109441555092278405
O.G. 🇺🇦🌻 (@[email protected])
Since #LastPass bashing is all the rage right now, I want to share something - I stopped using LastPass. But it had nothing to do with their security issues. I think their transparency and handling of having a constant target on their back has been above board. I switched myself and all of the extended family members away from their services last year... because of the way LastPass handled monetization. Tricking users into "free" accounts, then breaking the device sync functionality and demanding a payment to restore it was just shady. A lot of those users were not technical, and moving to LastPass for credential management was a first (and rather challenging) investment of time and effort for them. Breaking core functionality for a payment, causing confusion, loss of trust (and, in some cases, resistance to keep using a password manager) did not sit right with me. We pay the premium subscriptions to other services now.
- We were breached, but don't worry, your data was not stolen.
- Ok, we were breached, and your data was stolen, but don't worry, it was encrypted.
- Actually, we were breached, and your data was stolen, and some of it was not encrypted, but don't worry, the rest of it was definitely encrypted.
- You know what, were breached, and your data was stolen, and...
If you are always "experiencing higher than usual call volumes" then they aren't higher than usual.
Ok. I am going to say it. If you have surface knowledge of Silk Road and Mt.GoX in the context of Bitcoin's shady past, you have got to read @agreenberg's "Tracers in the Dark". I'm only on chapter 19, and I've now said "holy shit" to myself no fewer than 19 times. Without posting spoilers, the true story of the full extent of what transpired through those investigations put modern crime dramas to shame. And still over 30 chapters to go...