Notices by mkj (mkj@social.linux.pizza)

Has #Microsoft recently (last few days) been pushing the idea that #Yubikey physical presence #MFA #2FA suddenly isn't secure, to the point that they aren't even offering the choice of a previously registered Yubikey for MFA purposes even though it shows up in the #Office365 "my account" security settings? It used to be offered as an option after password entry and now... nothing.

If so, WHY!?! Did I manage to miss something huge here?

#infosec #cybersecurity #EthicalHacking #BlueTeam #RedTeam

@pseudonym @tek @blit32 So how about you segregate that? Surely it will improve security if you force people to go through a password reset process every odd few weeks when they need access to that kind of data and have forgotten their password, compared to if you let people set a strong password and just be done with it.

Also lots of companies force their employees to change their passwords with alarming frequency even when those employees, or even the company, never handle/s credit card info.

@tek @pseudonym @blit32 If there are conflicting standards, then we must be in need of a unifying standard!

Thereby invoking https://xkcd.com/927/

@mos_8502 One of the things that has me interested in #retrocomputing is that you actually could build a mental model of what's going on, from assembly lang instructions on up, and it wasn't totally onerous. Today, there's a gazillion layers of firmware, OS, drivers, frameworks, applications, frameworks again, virtualization/JITting, ... before you get to what you're actually telling the computer to do. Sure some of that adds value, but at some point, trying to explain it, best word is "magic".

@b_cavello @thomasfuchs It looks decently ergonomic to me as well. In the photo, the monitor is at about the right height relative to the eyes; the keyboard is maybe just *slightly* too low relative to the elbows; and the seat of the chair is at about the right height off the floor. I'm sure an #ergonomics expert could point at things that could be improved further, but I have seen lots of people working (especially work from home) with far worse ergonomics than the way this looks at a glance.