HA.

bleeding blue... all related to devops/security/it/web/mobile/geek

[Ali @RealAliVoice]

🇺🇸🇮🇱 Trump called Netanyahu crazy. And it was supposed to be a private call but now it’s public.😐

"You're f***ing crazy. Without me you'd be in prison. I saved you. Everyone hates you now."

Trump is now realising his guy
went too far. 💀

Here's what's wild:

✅ Trump gave Israel weapons.

✅ Trump blocked UN resolutions.

✅ Trump called Netanyahu a hero.

✅ Trump tried to cancel his corruption trial.

And NOW he has a problem? 😅

The moment it started hurting Trump politically;
suddenly Bibi is "crazy."

✓ Not when the hospitals and innocent civilians were bombed.
✓ Not when the aid ships were seized.
✓ Not when Beirut and GAZA was burning and bombing non stop.

When Trump's poll numbers moved. 📉

After the call, Trump immediately posted: "No Israeli forces will go to Beirut."

So one angry phone call did what
months of international pressure couldn't.

Interesting how that works. 😶

The whole world begged for restraint and ceasefire Got ignored.

Trump threw one tantrum, Got results.🤔

[Bill Ackman @BillAckman]

Incredible

[0xMarioNawfal @RoundtableSpace]

SOMEONE CREATED A GITHUB REPO WITH AN ENTIRE SETUP FOR AN AI AGENCY

Engineers, designers, growth marketers, product managers.

Broken down how even a rookie could understand.

It has over 10K stars in 7 days

GitHub: https://t.co/VYdwzJuCtB

[HA. @Hora_ce]

@elonmusk Literally common sense

[dax @thdxr]

https://t.co/94sOmxFFKO

[BlackRoomSec @blackroomsec]

Please share this far and wide. As far and wide as you can. NIST Password Guidelines for 2024 are in the process of being updated.

This is a HUGE pet-peeve of mine (when vendors in particular are still operating like its 2017 and keep changing passwords every 60 days, STOP DOING THIS, it's outdated and has been shown to put you MORE at risk than less -- NIST explains why it does in this document, meticulously outlining user behavior**) so I'm sharing this in the hopes all of you will pass it along to your bosses.

The Special Publication series governing passwords is SP 800-63 "Digital Identity Guidelines".

The 2024 version is 800-63-4.

Here: https://t.co/oX8YEJHxXg

The companion docs are also on that link. They are 800-63A, 800-63B and 800-63C. These are different documents for different scenarios in play at your org.

The previous update was in2020.

The changes in the 2020 version from the 2017 version were numerous but one of them was that the password verification method should NO LONGER require passwords be changed at specific intervals (i.e. every 60 days) but in the following circumstances instead:

1. After a breach/compromise
2. User request

2024 repeats this and adds a bunch more guidlines but here is a screenshot of page 13 of the new 800-63-4 (note the # 4 after it) which outlines how your systems should now and moving forward, be handling passwords.

This goes for Active Directory, too. All your systems which have passwords should align with these guidelines provided there isn't another standard or framework you must adhere to which overrules this.

Most frameworks, however, have moved away from arbitrary password resets and complexity rules.

**We cybersec researchers and hackers use wordlists from breaches in a variety of different ways. Hackers use them in tooling to crack passwords whereas researchers use breach dumps to see the kinds of passwords users are creating and the psychology behind them.

Using complexity rules gets you the user psychology of:

Password1
Password2
and so on

Use phrasing instead and allow for spaces, which is important. Humans type phrases with spaces. They also mention phish-resistant methods and most vendors are on-board with MS going to be turning off all Legacy Auth next month, across all free accounts and tenancies.

I'm so excited for the new changes!

Ok I'm off my soapbox.

Share the love! Thank you!

[Speaker 25 @rodtrent]

To help resolve the CrowdStruck outage...

Automated Workaround in Safe Mode using Group Policy. You can set up a GPO to run a script during Safe Mode.

https://t.co/JRPzhNDTH9

[Scott Hanselman 🌮 @shanselman]

I blame @stephentoub for this fiasco.

Seriously though, someone put me in touch with this employer so I can put some sense into them

[Kali Linux @kalilinux]

The xz package, starting from version 5.6.0 to 5.6.1, was found to contain a backdoor. The impact of this vulnerability affected Kali between March 26th to March 29th. If you updated your Kali installation on or after March 26th, it is crucial to apply the latest updates today.

[Rendle Has Left The Dumpster Fire @markrendle]

Hey everyone. I am urgently looking for a contract now, if anyone knows of any (very) senior developer/architect roles in the #dotnet world please let me know.

(DMs open, pls RT)

[Microsoft Azure @Azure]

Three new Azure Advisor Workbooks help optimize the cost-effectiveness, reliability, and operational excellence of all your Azure workloads: https://t.co/q3LcAkcjTf

[Mark Simos @MarkSimos]

The long-awaited Microsoft Cybersecurity Reference Architectures (MCRA) update is now live!

https://t.co/ZUd4ne90yD

In addition to the latest products & names, this is the first MCRA version integrated into the Microsoft Security Adoption Framework (SAF).

Share and Enjoy!

[Bunmi Akinremi @bumie_rose]

You don't have a technical background or are curious about what the 'AI hype' really means.

Check out my latest blog post on "Machine Learning for those who don't know anything about Machine Learning".

https://t.co/oTm74LHyDs

Yep, you got that right.

[Nikola Ilic @DataMozart]

NEW BLOG POST!

Working with tables in #microsoftfabric #lakehouse may look like a straightforward task - however, there are many nuances to be aware of before you decide to go one way or another.

https://t.co/W7UHgaDBxY

[Joanna Podgoetsky @joanalytics]

Announcing: Fabric Warehouse publishing full DML to Delta Lake Logs https://t.co/DMGaT7l44m via @MSFabric

[Dave Farley @davefarley77]

Why Software Estimations Are Always Wrong ➡️ https://t.co/MC07s7n9eA

#SoftwareEngineering #SoftwareDevelopment #NoEstimates

[ahmet alp balkan @ahmetb]

If you're sending your code for reviews or reviewing code actively, you should read https://t.co/DJVIrignDU.

[HA. @Hora_ce]

@itsmeattribute @Atlassian Getting same errors... Gateways errors 500,503 502... Looks like a xmas tree

[Scott LoBaido @ScottLoBaido]

@elonmusk @GundamIsHere I took care of it today!