Notices by Jake Hildreth (acorn) :blacker_heart_outline: (horse@infosec.exchange), page 15

@Sempf I had @horse.bsky.social for a while but quickly transitioned to @dotdot.horse

@Taco_lad @Viss @da_667 So... you gonna drop that recipe or...?

@da_667 @Viss The pre-cook sear is something I never did before the instant pot either, but now it's crucial!

@Viss @da_667 Overcooked kalua pork in the instant pot is basically cat food. Blech.

@sternecker A secret understanding

@ToreJuloe @shanselman I'm working through it right now. I really enjoyed my few uses of GitHub Copilot so far, but I do not enjoy sending all my code off-machine, so this is perfect!

@ToreJuloe @shanselman Like this? https://medium.com/@smfraser/how-to-use-a-local-llm-as-a-free-coding-copilot-in-vs-code-6dffc053369d

Locksmith (AD CS Remediation tool) v2024.1 is now available!

No long-winded notes this month. Instead, I'll just wish my wife a happy birthday! She's the best. ❤️💜💙

Tooling Improvements:

• ESC4 and ESC5 Ownership issues can now be auto-remediated with -Mode 4.
• Improved RSAT installation process (if you don't have it installed yet.)
• Modern custom object creation (no more Add-Member means slightly faster code that's much easier to read code)

Code/Repo Improvements:

• README now shows how to use the -Scans parameter to limit your search to just a specific issue.
• We now have CONTRIBUTING and CODE_OF_CONDUCT docs. They're not quite where we want them, but soon!
• PSScriptAnalyzer actions run on commit now, so we can check if there's anything hinky going on.
• Badges! Icons!

Known Issues:

• Objects with both Allow and Deny ACEs reports two issues in output (I promise I'll think about working on this one for February. :D)

Contributors:
@samerde
@techspence
@horse

@Viss @haroldgodwinson @dangoodin “Any sufficiently advanced security operation is indistinguishable from operational excellence.”

@Sempf @sternecker Same. When I was 19, I could fit all my stuff in a Ford Probe. Now, a Ford F650 might do it

Trimarc Happy Hour! We're going live now!

We are talking about conference swag and other stuff that I can't remember!

https://twitch.tv/TrimarcSecurity

@rmd1023 Periodic password changes are bad, but there are other requirements in NIST 800-63B that must be in place before eliminating password changes.

For example: password filtering (to prevent the creation/continued use of weak/compromised passwords) and password storage requirements are an integral part of 800-63B.

if MyChart is unwilling or incapable of providing the additional protections required, periodic password changes are the superior choice.

Ultimately, the best solution is for MyChart to take the steps required to eliminate password changes, but there’s so much for to 800-63B than “if you like your password, you can now keep it as long as you like!”

I forgot I signed up for a GitHub Copilot trial yesterday until a whole block of code I was about to write just appeared in VS Code. Neat!

@StompyRobot @varx 🤮

@rmi I created this meme forever ago to describe the devolution of information security, feel free to frame it

1970s & 1980s: Our mission is to achieve deterministic security and deductive, proof-based certainty of that security in our systems.

2010s & 2020s: Our hope rests in stopping laypeople from clicking on things on the thing-clicking machine.

@malmoeb @JimSycurity @NaderZaveri Hi! Thanks for shari my Locksmith!

@0x7eff @jerry @amitdoshi It really is shocking how 405 on your back for a few reps makes everything else seem insignificant, if only for a few seconds.

@coleens_ Nah, winter is cool.

@coleens_ GOOD MORNING

@Welktickler @nixCraft cargo cult was right there!