discreditable

Schneier says "don't make people change their passwords unless there's indication of compromise"

I make the assumption that the longer a password exists, the more likely it's reused and compromised. I don't have insight into every password dump, but I know my users reuse passwords a lot. I think a long expiry is the best balance in my environment.

Nothing stops them from using a unique passphrase. I am subjected to the same password requirements and use a unique passphrase every time.

I see harvested passwords as a larger threat than bruteforcing, so some kind of expiry is important. Some users might use good, unique passwords, but most will not.

My argument for password expiry (300 days here) is my users have complained they can't keep using the password they use everywhere else.

I work IT at a school. I try to strike a balance. I try to avoid doing creepy things in the name of security theater. I don't do TLS MITM, even though it might make web filtering easier. We do have some classroom monitoring software, but it can only be used while students are on our network.

I agree that there is a bit too much reliance on technical measures (ex: monitoring software) to police computer usage. This can be in absence of teaching kids personal responsibility. However, in a classroom environment it helps teachers immensely. While 80% of your students might handle themselves mostly, trying to police those remaining manually can eat up a lot of instructional time.

One point on the article:

> Teenagers are warned that the school is tracking what they do, and that they can get in trouble for visiting inappropriate websites.

If the school gets gov funds for IT, they have to be CIPA compliant[0]. This includes filtering adult websites and logging access to them. Fail to do so and you lose access to a lot of government funding through E-Rate[1]. The law is vague and somewhat up to school admin interpretation. I've seen some pretty intense surveillance regimes implemented in the name of CIPA.

0. https://en.wikipedia.org/wiki/Children%27s_Internet_Protecti... 1. https://en.wikipedia.org/wiki/E-Rate

Sounds like a good feature to me!

You might like https://bestmotherfucking.website

I was a GIMP/Inkscape user first. I have access to the full Creative Cloud Suite but I usually reach for GIMP or Inkscape first because (for me) they are simpler.

I think one area where GIMP/Inkscape are far better is in the export options. Photoshop & Illustrator barely give you any options for jpeg compression or PNG output. GIMP's JPEG export lets me control color subsampling, optimization, and more. Photoshop just gives me 0% - 100% quality.

When I bought a Toyota 4 years ago I was surprised to see the dealer using a separate DOS machine for the contract. I was even more surprised when he printed the contract to a dot matrix printer.

I bet they will switch to date-based releases long before then.

I switched from freeotp when they dropped the ability to backup the secrets database.

Multiple scrollable areas in a window is pretty annoying in my experience. Depending on what you last clicked on and where your cursor is can result in different areas being scrolled.

And God help them if they somehow have a work/school and personal Microsoft account and don't remember which one they used.

So if Let's Encrypt has a problem, like say their OCSP server is serving errors[1] then the entire Internet is not affected.

https://community.letsencrypt.org/t/may-19-2017-ocsp-and-iss...

Forbes articles are pretty clickbait. I blocked them in Google News because their headlines are bonkers. It's always a formula like

Microsoft issues update warning to 10 gorillion PCs (some super minor problem in the last patch cycle)

10 bazillion Android phones have spyware (some malware app was removed from the play store)

It has a boat load of plugins. I looked at a few and after puzzling over which were default enabled and default disabled I decided I didn't want to use a program with unsafe defaults.

Be aware that svgo is a lossy operation. One thing it does is round the digits in numbers to a certain precision. When I last worked with it, it also did some things I did not like such as mess with viewboxes. I found that it messed up the sizing of SVGs embedded with <img> tags in certain browsers. It has been a while since I used it though.

That bracket reminds me a lot of a CPU bracket. It's not hard to imagine a hole in the top so you could mount a heatsink with direct contact to the card.

target="_blank" rel="noopener noreferrer"

Money.

One problem is that TVs run at 60fps and don't support adaptive sync. 60 is not evenly divisible by 24. Without some kind of trick you're padding to 30fps by duplicating every 4th frame, or trimming to 20fps by dropping every 6th frame.

Padding is usually what's done. You can see it in NTSC (30fps) DVDs which come from something originally produced for PAL (25fps). Every 5th frame is duplicated.

It makes me curious what framerate movie projectors run at. Maybe the "cinema experience" includes goofy frame duplication and nobody realizes it.

It's turbo BS that you're not entitled to cash payout unless you already have a credit monitoring service.

glyphs that look similar in most fonts: appIIe[.]com payaI[.]com

They look different in monospace, but I know Gmail renders plaintext mail with a normal sans-serif.

You can also just spell things mildly wrong. People often auto-correct spelling in their mind without realizing it, ex: microsott[.]com

Note I added [] to avoid linking the sites. Those domains look like they're squatted by suspicious customers already.

I wish they'd integrate PoE (without the hat). That chip they're using appears to support it. http://www.trxcom.com/Product/product/id/353.html

Similar story here. I use pelican to generate my site. I wrote a very lightweight theme for it too (under 10k per page). I can host it anywhere that serves html.

These guys are a big part of why I rarely answer my door anymore.

As of right now their UI to allow third-party cookies is pretty bad. Chrome shows an icon in the address bar for it. In Nightly there is a section in tracking prevention, but it's not in normal Firefox yet.

Any other G Suite customers still getting delayed notifications from the outage? I got a batch of 17 last night and another this morning.

The problem is the password change UI on Windows systems is terrible. It does not give users any clue why their password was not accepted other than "Unable to update the password. The value provided does not meet the length, complexity, or history requirements of the domain."

If services were secure then password re-use would not be such a problem.

* If you use Azure Active Directory