« first day (1566 days earlier)      last day (2244 days later) » 

13:39
Wow. Only three people on the Floor this morning. I don't think I've ever seen that few people before.
14:11
Happy NYE :)
@Hosch250 Happy NYE!
Happy password-change day for me too.
Now I get to update like 5-10 work account passwords.
14:27
0
Q: Why can't you suggest multiple ways of solving the question in said question?

SoanI just asked in Worldbuilding how to stop intelligent races from discovering electricity and it was marked as to broad. I assume this is because I originally suggested two ways to solve my problem. If I am correct and thats why it is to broad I would like to know why there is no possibility to ...

 
4 hours later…
18:19
@Hosch250 a friend aligns his password changes with quarter boundaries too -- makes incrementing the password easier. :-) (SecurePassword18Q4, SecurePassword19Q1, etc.)
18:37
LOL.
No, I don't intentionally align it with the boundaries--the email just came in.
It does make sense that it aligns, though, considering I started just before Memorial day, so changing it as soon as the 14-day warning comes in would lead to it pretty quick.
I do "correct-horse-battery-staple" type passwords, with a random word generator.
18:54
@Hosch250 our corporate policy is every 90 days, but they start the count from when you change it, not when the period expires, so it's not practical to keep them date-aligned.
(Well, that was the policy; we've recently been through some spinoff/merger stuff so I don't know if that's going to change.)
Ours is triggered from when you change it. I think it's actually a rule set up in Active Directory that's just "password must not be used for longer than N days".
I think ours is 90 too, although it might be 120 or something.
Ah, that would explain it if it's an Active Directory setting; there's probably a default value that most places use.
Or a certification (like SOC II) says it has to happen every so often. It's easy-ish to set either way.
why do people persist with password rotation policies?
To help resist digital attacks.
If someone gets access to a system by getting someone's password, but is just doing read-only attacks to reduce their chance of being caught, but still gleaning lots of useful information, a password change will lock them out again.
At least temporarily.
19:08
yeah -- well, maybe yearly or so, but any more than that and it hurts more in password strength than it gets you otherwise, no?
No.
FWIW, here's how I handle my passwords:
I create the new password and write it on a sticky note.
I then fold that sticky note and keep it in my wallet until I have it remembered good.
If you use correct-horse-battery-staple style passwords, it's easy to remember it fast.
Throw a few numbers interspersed, and it's pretty good.
Like, maybe "correct-h0rse!battery*stable(3"
Or something.
@Shalvenay Password expiration policies should be matched to the time it takes to brute-force attack a password with common complexity (common complexity as defined by the password requirements, say "1 upper case, 1 number, 1 symbol, 10 char minimum, etc)"
Easy to remember, hard to shoulder-surf.
And hard to brute-force.
Because I can type normal words a lot faster than I can type a random jumble.
So it's not finger-pecking anymore, it's touch-typing.
I like doing 30 character behemoths but that got old after a while when I'd keep messing up on the 28th or 29th letter.
@Green heheheh. that might not be reasonable, depending on the capability of your KDF....
19:11
And I use weird hand positioning when I touch type (not intentionally).
@Shalvenay Also true.
@MonicaCellio Hi!
So, for example, I typically hit O with my fourth finger, unless I hit P right before it.
@Hosch250 this sort of thing worked better for me when I had two or three passwords I needed to remember. These days, just at work, I have 20-30 passwords I occasionally need, in addition to the two I frequently need. The two I can memorize; the rest I can't, and the systems have incompatible password rules so I can't always take the "mixin" approach. There are still corporate systems that set a ridiculous max length, too. :-(
So, if you see my use my fourth finger really fast, you can't tell which I hit. Same with I and U for my third.
@MonicaCellio That's what "forgot my password" is for.
@MonicaCellio I know about ridiculous password storage rules. why do you have so many occasionally-needed passwords though? does your work not have a SSO system?
19:13
TBH, for systems I only need to access once a month or so, I do throw-away passwords and immediately forget them.
When I need to go back in, I reset the password.
@Hosch250 my passwords are built around (non-English) meaningful strings that I can type quickly, too. Then I have to add numbers and punctuation.
@Green hi! How're things?
@MonicaCellio I got a new job!
7
I'll be a super fancy (and very expensive) computer teacher.
@Green How's your nuclear reactor thing going?
@Hosch250 true, and there's one annual password that I always end up doing that with. Yeah, benefits-enrollment site had its own password until this year...
@Hosch250 Slow. I found one produce (OpenSCAD) that let me prototype reactor geometry really easily but couldn't embed/control the kinds of parameters I need to actually do simulations. I'm planning on using GMSH instead.
GMSH appears to be able to do what I need it to do but the complexity is a bit higher since there are far more knobs to turn.
19:16
Sounds interesting, but I've no idea what you are talking about, LOL.
As long as it's going good, and you haven't blown yourself up yet :)
@Shalvenay our IT is a jumble of disparate systems in a company that grows by acquisition. They are working on collapsing this; I can now use the same password for Windows login and benefits and recording time off and submitting expenses and a few other things. But I just had to book some travel and that involved a separate password. There's still work to be done...
@Hosch250 Running a simulation requires defined geometry (in my case, the reactor vessel itself) and it needs initial conditions (gas flow with these properties, moving at X m/s from these entry ports and leaving through these exit ports).
@Green yay, congratulations! Great way to start the new year!
You have to define the entry and exit ports, the materials of the vessel and the gases in the vessel.
@Hosch250 now there's something not to take out of context. :-)
19:19
@Hosch250 I plan to spend a lot of time on safety controls on this thing. The goal is to have it run indefinitely without supervision. The degree of automation is going to be very high.
@MonicaCellio Just trying to get him raided by the FBI :P
@Hosch250 oh, I meant in the context of a new teaching job. :-)
Ohhh.
@Hosch250 Oh, I'm probably already on various watch lists. Last time I flew I was "randomly" selected for chemical residue testing, twice; at the same checkpoint.
LOL.
Yeah, sounds suspicious :)
19:21
Once on the way to the checkpoint and again after the x-ray.
But, since I'm not stupid, I buy the books on how to make dangerous things but I don't buy the ingredients. It's a hard case to make if there are no materials required to make the dangerous thing.
My mom used scented hand sanitizer (so she claims) coming back from Spain, and tripped the alarm.
She got called out and they went through everything.
She came back hysterical, and extremely glad they didn't insist on a body cavity exam.
I'm debating buying another programming book since it's half off today.
OTOH, I'm having a hard time making the case to do it when I have 2.5 that I recently bought or won and haven't finished.
And it'll almost certainly be half-off in about a month or so when it comes out of early-access (i.e. the print book is done).
@Hosch250 I don't buy programming books anymore for that exact reason (and I'm not a developer anymore. It's finally sunk in that I shouldn't ever write code for real-zies.)
@Green strange plot: someone truckbombing an old, no longer used gov't building, on a NIJ grant, with the building wired for sound with sensors...."hey FBI, do you mind if we send your old building over there out with a bang, for science?"
@Green Hey. I did finish 1.5 that I bought at the same time :)
@Hosch250 Sorry, I meant I don't buy programming books because I never finish them, ever.
19:28
@Green I finish them--I just got a ton at the same time to keep my busy for a while, and have just one left on my list.
@Shalvenay Alcohol Tobacco and Firearms would probably care more than the FBI.
@Hosch250 Oh very nice! You're doing way better than me!
@Green oh, the ATF folks would be in on it from day 1
@Hosch250 he finishes them, but he doesn't say how quickly. So how was that FORTRAN77 book? :-)
@MonicaCellio FORTRAN77? That book is probably older than I am.
I finished a microservices book and half an F# book in about a month. I won a Python algorithm book that's next, and bought the next version on C# In Depth by Skeet, that I'm going to read after the Python and F# ones, since I already read the 3rd ed.
I want a book on deep learning, Go (game), and Python (language).
That guy.
@Hosch250 If you like GoLang then I'd recommend Elixir and Erlang too.
19:42
Elixir sounds cool, but I don't know GoLang.
This book shows how to use deep learning to train a Python bot to play the Go game.
I've seen all three languages before, but not had time to use them.
19:56
@Hosch250 Oops. I got confused with Go (game) with Go (language). sorry.
Happy new year to all!
2
20:48
@ALambentEye Happy new year to you, too!
@Green Congrats! Sounds awesome.
 
1 hour later…
22:15
@HDE226868 Thanks! It's a really exciting prospect for me.
Happy new year all! (It'll be a few hours yet here, but I want to catch the folks who'll be long asleep by then.)
23:21
Happy new year!
23:46
0
Q: Worldbuilding SE running slowly/choppy scrolling?

Andrew FanRecently I've started browsing Worldbuilding SE again. I've noticed that on my browser of choice (Safari), it runs at a very choppy pace compared to other sites in the Stack Exchange network such as Stack Overflow. Scrolling on any page feels laggy and choppy to the extent that the site becomes h...


« first day (1566 days earlier)      last day (2244 days later) »