Marcel de la peña

Looking for the answers to the questions of Life and Death

[Marcel de la peña @gilandune]

@[email protected]

[JaimeCCS @JaimeCCS]

Es un crack el que hizo este video y un genio quien escribió la letra y su musicalización.

¡No se lo pierdan!

Todo el #NarcoRégimen es un lastre para México.

Pronto caerán, infelices.

[Marcel de la peña @gilandune]

@CondusefMX Gracias! mi numero ya esta registrado y se lo dije a los agentes de @HSBC_MX y no les importa!

[Marcel de la peña @gilandune]

@HSBC_MX que tengo que hacer para que me dejen de llamar 5 veces al día? Ni siquiera uso sus servicios!

[Marcel de la peña @gilandune]

@HSBC_MX Claro, gracias!

[Goodable @Goodable]

Charlie Brown adopted Snoopy exactly 74 years ago today. This is the moment they met.

Get out the tissues...

🥹🥹

[BlackRoomSec @blackroomsec]

Please share this far and wide. As far and wide as you can. NIST Password Guidelines for 2024 are in the process of being updated.

This is a HUGE pet-peeve of mine (when vendors in particular are still operating like its 2017 and keep changing passwords every 60 days, STOP DOING THIS, it's outdated and has been shown to put you MORE at risk than less -- NIST explains why it does in this document, meticulously outlining user behavior**) so I'm sharing this in the hopes all of you will pass it along to your bosses.

The Special Publication series governing passwords is SP 800-63 "Digital Identity Guidelines".

The 2024 version is 800-63-4.

Here: https://t.co/oX8YEJHxXg

The companion docs are also on that link. They are 800-63A, 800-63B and 800-63C. These are different documents for different scenarios in play at your org.

The previous update was in2020.

The changes in the 2020 version from the 2017 version were numerous but one of them was that the password verification method should NO LONGER require passwords be changed at specific intervals (i.e. every 60 days) but in the following circumstances instead:

1. After a breach/compromise
2. User request

2024 repeats this and adds a bunch more guidlines but here is a screenshot of page 13 of the new 800-63-4 (note the # 4 after it) which outlines how your systems should now and moving forward, be handling passwords.

This goes for Active Directory, too. All your systems which have passwords should align with these guidelines provided there isn't another standard or framework you must adhere to which overrules this.

Most frameworks, however, have moved away from arbitrary password resets and complexity rules.

**We cybersec researchers and hackers use wordlists from breaches in a variety of different ways. Hackers use them in tooling to crack passwords whereas researchers use breach dumps to see the kinds of passwords users are creating and the psychology behind them.

Using complexity rules gets you the user psychology of:

Password1
Password2
and so on

Use phrasing instead and allow for spaces, which is important. Humans type phrases with spaces. They also mention phish-resistant methods and most vendors are on-board with MS going to be turning off all Legacy Auth next month, across all free accounts and tenancies.

I'm so excited for the new changes!

Ok I'm off my soapbox.

Share the love! Thank you!

[Marcel de la peña @gilandune]

@Spotify what do I need to do to stop getting recommendations bad on geographical location? It makes no sense, makes the dj and automated playlist unusable and is seriously making me reconsider my subscription at this point, from how much it's happening.

[Marcel de la peña @gilandune]

@Aire_CDMX que pasó con el sitio para ver la calidad del aire? Tiene meses fuera de servicio!

[Jake Williams @MalwareJake]

What's the final tally for financial impact of the CrowdStrike content update? RT for reach please.

[Goodable @Goodable]

On the top right, you'll see a formation of gasses.

We know they're just gases, but we can't help thinking about the spider monster from @Stranger_Things.

Hey @Chandraxray, should we be worried?

[Soy aracnólogo, pregúntame lo que quieras @Arachno_Cosas]

Hablando de arañas:

En 2013, Nelsen y cols investigaron cuando es que muerden. Para ello, "molestaron" a varias viudas negras (Latrodectus hesperus) para ver su reacción

Dividieron la molestia en baja, media y alta.

Los resultados son asombrosos
https://t.co/RBP8Zp6jg5

[Carbon Brief @CarbonBrief]

Mexican citizens will go to the polls tomorrow (2 June) to elect new leaders.

What do the manifestos of the leading candidates say on energy and climate change?

Read here ➡️ https://t.co/fo0izrztBk

This article is also available in Spanish: https://t.co/MUk5YwLOMA

[Marcel de la peña @gilandune]

@hakluke Man, I hadn't seen that in ages. Thanks for the memories!

[Marcel de la peña @gilandune]

@Robotbeat @Noahpinion I can't disagree that for you it's both if you say so, that is not the case for everyone though.

[Marcel de la peña @gilandune]

@Noahpinion a person's life is not the population's life though. Overall, reproducing is the most meaningful action for life, but that is not the same thing as the most meaningful thing in a given person's life, which is what the original tweet meant

[Marcel de la peña @gilandune]

@AkiyoshiKitaoka @ep30lon The visual effect on this one is very strong!

[Marcel de la peña @gilandune]

@Aire_CDMX Porqué no se ha actualizado la calidad del aire a la 15 horas? Que pasa con el anuncio de contingencia necesario?

[Dallas Cowboys @dallascowboys]

HOW 'BOUT THEM COWBOYS 🗣️💙

[Marcel de la peña @gilandune]

@SwiftOnSecurity I feel this in my soul, too true