Edgar Gonzalez

Current iteration: Director of Engineering @StreetEasy (Zillow) • Previously: Director DevOps & Data @BlueApron • Co-founder & CTO @ Piictu
🦣 @[email protected]

[Edgar Gonzalez @edgar]

@JessyCarrillo live en este momento conversando sobre la audiencia de Maduro y Cilia hoy

[TalCual @DiarioTalCual]

En #NocheD, Jessica Carrillo Mazzali dice: pareciera que la actitud de Maduro y Flores en el juicio es parte de esta estrategia de la defensa. De lo contrario no se entendería por qué la actitud desafiante con el juez.

https://t.co/Pn7Twp1Cwq

[Edgar Gonzalez @edgar]

A shameless plug

Si quieren estar al tanto del caso de Maduro y Cilia en NYC, sigan a Jessy.

En su momento ella cubrió el caso de los https://t.co/LlsylU6txr

[Jessica Carrillo @JessyCarrillo]

El resumen de lo que ocurrió hoy en la Corte del Distrito Sur de Nueva York con la audiencia de presentación de Nicolás Maduro y Cilia Flores.

[Jessica Carrillo @JessyCarrillo]

El resumen de lo que ocurrió hoy en la Corte del Distrito Sur de Nueva York con la audiencia de presentación de Nicolás Maduro y Cilia Flores.

[Edgar Gonzalez @edgar]

But that doesn’t mean she is a “moderate”

[Anatoly Kurmanaev @AKurmanaev]

Journalism is not telling people what they want to hear, it's telling them what's happening.

[Edgar Gonzalez @edgar]

@AKurmanaev it doesn’t seem like you’ve lived 8 years in Venezuela. How could Delcy be described as ‘the moderate’. The SEBIN— responsible of killing and torturing political prisoners— reports directly to her

Hard to see this analysis as being made/edited in good faith @nytimes

[Anatoly Kurmanaev @AKurmanaev]

If Maduro goes, who would replace him? https://t.co/96uIqr0vmW

[The Nobel Prize @NobelPrize]

BREAKING NEWS
The Norwegian Nobel Committee has decided to award the 2025 #NobelPeacePrize to Maria Corina Machado for her tireless work promoting democratic rights for the people of Venezuela and for her struggle to achieve a just and peaceful transition from dictatorship to democracy.

#NobelPrize

[Naky Soto 🍃 @Naky]

@QuinteroCalle Redomado imbécil.

[Dana Goldberg @DGComedy]

I ❤️ @JohnLeguizamo

[Edgar Gonzalez @edgar]

@LuisCarlos @CatedraPop 🙌 este reconocimiento es más que bien merecido !

[Edgar Gonzalez @edgar]

NIST is updating their password guidelines, finally getting rid of
- password rotations
- complexity rules - adopt phrasing instead

[BlackRoomSec @blackroomsec]

Please share this far and wide. As far and wide as you can. NIST Password Guidelines for 2024 are in the process of being updated.

This is a HUGE pet-peeve of mine (when vendors in particular are still operating like its 2017 and keep changing passwords every 60 days, STOP DOING THIS, it's outdated and has been shown to put you MORE at risk than less -- NIST explains why it does in this document, meticulously outlining user behavior**) so I'm sharing this in the hopes all of you will pass it along to your bosses.

The Special Publication series governing passwords is SP 800-63 "Digital Identity Guidelines".

The 2024 version is 800-63-4.

Here: https://t.co/oX8YEJHxXg

The companion docs are also on that link. They are 800-63A, 800-63B and 800-63C. These are different documents for different scenarios in play at your org.

The previous update was in2020.

The changes in the 2020 version from the 2017 version were numerous but one of them was that the password verification method should NO LONGER require passwords be changed at specific intervals (i.e. every 60 days) but in the following circumstances instead:

1. After a breach/compromise
2. User request

2024 repeats this and adds a bunch more guidlines but here is a screenshot of page 13 of the new 800-63-4 (note the # 4 after it) which outlines how your systems should now and moving forward, be handling passwords.

This goes for Active Directory, too. All your systems which have passwords should align with these guidelines provided there isn't another standard or framework you must adhere to which overrules this.

Most frameworks, however, have moved away from arbitrary password resets and complexity rules.

**We cybersec researchers and hackers use wordlists from breaches in a variety of different ways. Hackers use them in tooling to crack passwords whereas researchers use breach dumps to see the kinds of passwords users are creating and the psychology behind them.

Using complexity rules gets you the user psychology of:

Password1
Password2
and so on

Use phrasing instead and allow for spaces, which is important. Humans type phrases with spaces. They also mention phish-resistant methods and most vendors are on-board with MS going to be turning off all Legacy Auth next month, across all free accounts and tenancies.

I'm so excited for the new changes!

Ok I'm off my soapbox.

Share the love! Thank you!

[Edgar Gonzalez @edgar]

@jordimirobruix @anibal 💯

Por cierto, nginx es un excelente software, moviendo >40% del tráfico. Tal vez uno de sus pocos inconvenientes es tener que usar LUA para extenderlo

[Edgar Gonzalez @edgar]

@jordimirobruix @anibal lol ahora estamos en los tiempos de Istio y mesh services

[Edgar Gonzalez @edgar]

From the Carter Center
(who in the past validated the results of several processes that declared the Chavismo winner of the elections)

[Dr. Jennifer McCoy @jlynnmccoy]

Venezuelans have a difficult choice to make this morning - go to peaceful assemblies en masse to demonstrate their rejection of the Maduro regime in the midst of terrible persecution and repression, or stay home in safety but allowing the regime to consolidate power from fear. 1/

[Edgar Gonzalez @edgar]

@jgomo3 @ielijose @ggangix Ya que Jesus uso https://t.co/l3UslSLbtF, yo puse https://t.co/exbIgUD1L4

[Edgar Gonzalez @edgar]

El nombre del dominio es la merma, y además está hosting un fork del código de @ielijose para acceder las actas.

Pura creatividad y talento. Maravillosa sinergia 🇻🇪

[Giuseppe Gangi @ggangix]

🗳️ Puedes consultar el acta de tu mesa de votación en: https://t.co/uN3GNlilt7

[Giuseppe Gangi @ggangix]

🗳️ Puedes consultar el acta de tu mesa de votación en: https://t.co/uN3GNlilt7

[Edgar Gonzalez @edgar]

Esto 👇
También a la orden por acá

[Aníbal Rojas @anibal]

DE PANA, si alguien conoce al equipo que está armando la página de https://t.co/ZW7uofH0VB y necesitan apoyo de ingenieros super top que en su día a día manejan de forma rutinaria millones de requerimientos y ataques DDoS mis DMs están abiertos para echar una mano con lo que sea.

[Edgar Gonzalez @edgar]

@fmontes 🤞

[Edgar Gonzalez @edgar]

Iteration 0x37

[Edgar Gonzalez @edgar]

@Naky Feliz cumple Naky 🎉 🥳