Ed Bellman

Husband, father, geek, AFOL, former IT guy, M365 & Power Platform. Principle Consultant Power Apps at @P3Adaptive / Opinions are own / Disagreement ≠ hate

[Ed Bellman @EdBellman]

https://t.co/XoqGkFKqtR #PowerApps #PowerPlatform

[Ed Bellman @EdBellman]

https://t.co/pqUKICmp09

[Ed Bellman @EdBellman]

Follow me on Substack
https://t.co/L6XppNnP0B

[Ed Bellman @EdBellman]

The @Bengals should sign Ja’Marr to a new record deal on Monday, and then on Tuesday announce restructured deals for Burrow and Ja’Marr and a new deal for Higgins to keep them all three together. And then on Wednesday an extension for Trey.

See, that was easy…!

[Ed Bellman @EdBellman]

@PlayOverwatch Got to go with Soldier76

#Overwatch2Sweepstakes

[TPS @TotalProSports]

Nintendo prepped us for this.

[Paul Dehner Jr. @pauldehnerjr]

If you ever want to understand the margins of life in the NFL do a study of the Chiefs’ 9-0 versus the #Bengals’ 4-6.

[ProFootballTalk @ProFootballTalk]

Forget about sideline scowling. Joe Burrow needs to start getting in the faces of officials who blow calls, like Tom Brady used to do. Because it works. https://t.co/mriPOzSh6Q

[LASIK.com @LASIKdotcom]

Better Vision. Better Calls.

Yes, we’re still offering NFL refs free LASIK.

[Ed Bellman @EdBellman]

The exclamation point at the end of a great play ❗️

[Barstool Sports @barstoolsports]

What if I told you a wide receiver from Incarnate Word changed the touchdown celebration game as we know it

[Andrew Russell @Andrew_Russell7]

In their 3 wins the Bengals have built leads by throwing the football, but for some reason abandon that and try to "protect" their 4th quarter lead.

1st Q: 66% pass
2nd Q: 87% pass
3rd Q: 60% pass
4th Q: 28% pass

You have to trust Burrow and his weapons to close it out.

[Ed Bellman @EdBellman]

Any word on the street about @Azure Maps connector support for the Power Platform? Only 8 months until EOS for Basic keys…
@rezadorrani @aprildunnam @MSPowerPlat @AzureMaps

[nathan😾 @nwhodey]

Burrow isn’t top 5 in MVP odds btw

[Donald J. Trump @realDonaldTrump]

The GREAT Pete Rose just died. He was one of the most magnificent baseball players ever to play the game. He paid the price! Major League Baseball should have allowed him into the Hall of Fame many years ago. Do it now, before his funeral! DJT

[Cincinnati Reds @Reds]

The Reds are heartbroken to learn of the passing of baseball legend Pete Rose.

[BlackRoomSec @blackroomsec]

Please share this far and wide. As far and wide as you can. NIST Password Guidelines for 2024 are in the process of being updated.

This is a HUGE pet-peeve of mine (when vendors in particular are still operating like its 2017 and keep changing passwords every 60 days, STOP DOING THIS, it's outdated and has been shown to put you MORE at risk than less -- NIST explains why it does in this document, meticulously outlining user behavior**) so I'm sharing this in the hopes all of you will pass it along to your bosses.

The Special Publication series governing passwords is SP 800-63 "Digital Identity Guidelines".

The 2024 version is 800-63-4.

Here: https://t.co/oX8YEJHxXg

The companion docs are also on that link. They are 800-63A, 800-63B and 800-63C. These are different documents for different scenarios in play at your org.

The previous update was in2020.

The changes in the 2020 version from the 2017 version were numerous but one of them was that the password verification method should NO LONGER require passwords be changed at specific intervals (i.e. every 60 days) but in the following circumstances instead:

1. After a breach/compromise
2. User request

2024 repeats this and adds a bunch more guidlines but here is a screenshot of page 13 of the new 800-63-4 (note the # 4 after it) which outlines how your systems should now and moving forward, be handling passwords.

This goes for Active Directory, too. All your systems which have passwords should align with these guidelines provided there isn't another standard or framework you must adhere to which overrules this.

Most frameworks, however, have moved away from arbitrary password resets and complexity rules.

**We cybersec researchers and hackers use wordlists from breaches in a variety of different ways. Hackers use them in tooling to crack passwords whereas researchers use breach dumps to see the kinds of passwords users are creating and the psychology behind them.

Using complexity rules gets you the user psychology of:

Password1
Password2
and so on

Use phrasing instead and allow for spaces, which is important. Humans type phrases with spaces. They also mention phish-resistant methods and most vendors are on-board with MS going to be turning off all Legacy Auth next month, across all free accounts and tenancies.

I'm so excited for the new changes!

Ok I'm off my soapbox.

Share the love! Thank you!

[Ed Bellman @EdBellman]

Would totally purchase this, if they’d let us…

[Willie Lutz @willie_lutz]

ESPN proposed individual team packages for $70 that would've allowed you to watch all 17 of your favorite NFL team's games.

The league said no.

[Riley Gaines @Riley_Gaines_]

Men don't belong in women's sports #IStandWithAngelaCarini

Let's get it trending 🔥