The thing about great quotes by great people is that most of them were already great by the time they made those quotes. A lot of great quotes by unknown people have probably gone unnoticed.
| Birdsite | @0x4f47 |
| Bluesky | @0x4f47.bsky.social |
O.G. 🇺🇦🌻
- 266 Followers
- 200 Following
- 14 Posts
Recovering threat hunter.
No, I am not that OG.
NIST SP 800-63B-1: Change your password every 90 days.
...
NIST SP 800-63B-3: No periodic password change requirements.
...
NIST SP 800-63B-5: Change your password every LastPass breach.
...
NIST SP 800-63B-3: No periodic password change requirements.
...
NIST SP 800-63B-5: Change your password every LastPass breach.
I have unfounded fears about using escalators, but I am taking steps to avoid them.
Welp, I guess I know what I'm doing this holiday season. Going through all of my online accounts and changing all the passwords and recovery codes, because I don't remember if I did all of them when I ditched #LastPass and they're not making it very clear what exactly got stolen 
https://infosec.exchange/@og/109441555092278405
https://infosec.exchange/@og/109441555092278405
O.G. 🇺🇦🌻 (@[email protected])
Since #LastPass bashing is all the rage right now, I want to share something - I stopped using LastPass. But it had nothing to do with their security issues. I think their transparency and handling of having a constant target on their back has been above board. I switched myself and all of the extended family members away from their services last year... because of the way LastPass handled monetization. Tricking users into "free" accounts, then breaking the device sync functionality and demanding a payment to restore it was just shady. A lot of those users were not technical, and moving to LastPass for credential management was a first (and rather challenging) investment of time and effort for them. Breaking core functionality for a payment, causing confusion, loss of trust (and, in some cases, resistance to keep using a password manager) did not sit right with me. We pay the premium subscriptions to other services now.
- We were breached, but don't worry, your data was not stolen.
- Ok, we were breached, and your data was stolen, but don't worry, it was encrypted.
- Actually, we were breached, and your data was stolen, and some of it was not encrypted, but don't worry, the rest of it was definitely encrypted.
- You know what, were breached, and your data was stolen, and...
If you are always "experiencing higher than usual call volumes" then they aren't higher than usual.
@SwiftOnSecurity if you're in InfoSec, message your team "looks like it's going to be a quiet one" on a Friday afternoon.