I’ve had success directing people to the NIST password policy guidance.
NaibofTabr
- 0 Posts
- 47 Comments
NaibofTabr@infosec.pubto
Ask Lemmy@lemmy.world•What are some everyday things that feel magical to you?English
69·3 days agoWe carve arcane patterns:

into specially prepared pieces of rock:

then apply energy and imbue them with instructions in specific, obscure languages to perform tasks for us. If you make any mistakes while uttering the instructions, the task fails.
deleted by creator
NaibofTabr@infosec.pubto
Ask Lemmy@lemmy.world•If you could plant an earworm song in your enemies, what would it be?English
4·3 days agoIf you were assuming this was a rickroll… you would be wrong.
It’s worse than that. And yet, also better.
NaibofTabr@infosec.pubto
Ask Lemmy@lemmy.world•If you could plant an earworm song in your enemies, what would it be?English
6·3 days agoI assume we’re enemies now.
Your rocket will ignite in fifteen minutes.
Actually, it’s looking more like six days.
No wait, thirty seconds.
NaibofTabr@infosec.pubto
Mildly Infuriating@lemmy.world•And no paper towels to use on the handleEnglish
3·5 days agoFreudian slap.
Be careful whose advice you buy,
but be patient with those who supply it.
Advice is a form of nostalgia;
dispensing it is a way of fishing the past from the disposal,
wiping it off,
painting over the ugly parts
And recycling it for more than it’s worth
NaibofTabr@infosec.pubto
Lemmy Shitpost@lemmy.world•It was revealed to me by the microplastics in my brainEnglish
23·7 days agoPreferred solution for an unholy operating system:

…blue, dark blue
Have you ever been alone in a crowded room?
NaibofTabr@infosec.pubto
Ask Lemmy@lemmy.world•If you created a simulation that resulted in the creation of countless intelligent beings would it be unethical to end the simulation?English
30·8 days agoSomewhere in a box in your childhood home, a Tamagotchi is slowly dying…
NaibofTabr@infosec.pubto
Ask Lemmy@lemmy.world•What are some good conventions, festivals, faires (in the West-ish of the US)?English
6·13 days agoRocky Mountain RepRap Festival - a 3D printing focused maker convention in Loveland, CO
California Extreme - a pinball and arcade game show, with all machines in free play mode, held in Santa Clara, CA
DEF CON - in Las Vegas, NV
DundraCon - an RPG-focused gaming convention, also in Santa Clara, CA
KublaCon - a board & tabletop game convention, now held twice a year in Burlingame, CA
Maker Faire Bay Area - maker fair held in Vallejo, CA
Golden State Pinball Convention - pinball convention held in Lodi, CA
Have you felt the touch of His noodly appendage?
NaibofTabr@infosec.pubto
Ask Lemmy@lemmy.world•What is something that desperately needs to be standardized?English
20·15 days agoBest of luck with that mate. Do you know how many different cross-shaped drives there are already?

https://en.wikipedia.org/wiki/List_of_screw_drives
And if you really want to get upset about confused standards you should read the section of the Talk page about why JIS B 1012 was removed:
https://en.wikipedia.org/wiki/Talk:List_of_screw_drives
They ARE distinct from standard Phillips, and posidrive. If one tries to use Phillips on them you’ll likely strip the head.
[…]
As discussed, the previous paragraph was wrong and (as of now) uncited, so it was removed. No information is better than wrong information.
NaibofTabr@infosec.pubto
Technology@lemmy.world•This robotic hand has such sensitive touch that it can grasp objects as fragile as a potato chip or a raspberry without crushing themEnglish
22·16 days agoRobots can fold a shirt
Yeah, kinda… not really…
https://www.theverge.com/featured-video/860104/we-tried-to-get-humanoid-robots-to-do-the-laundry
NaibofTabr@infosec.pubto
Ask Lemmy@lemmy.world•Whats a good lesson you learned on the job?English
14·17 days agoEverything is prod.
No no, everything is test.
NaibofTabr@infosec.pubto
Ask Lemmy@lemmy.world•Whats a good lesson you learned on the job?English
35·17 days agoEverybody has a test environment.
Some are lucky enough to also have a production environment.


The folks at NIST know what they’re talking about. The US government directed them to develop security policy for government information systems in 2002 (FISMA) - they’ve been thinking about how to do this properly for 24 years.
If you happen to work for a US government agency of any kind, you can basically tell your boss “NIST guidance says we should do X” and compliance is technically required by law (within the context of security policies that apply to your agency’s work area). If you work for a company that does business with the US government, there are similar compliance policies also published by NIST that you should be following (and your company could lose its contracts if it is not compliant).