I always made sure I had Thomas guide book for any areas I went through in my car.

For anyone unfamiliar with the source.

https://archive.org/stream/i-have-no-mouth-and-i-must-scream_202202/I Have No Mouth And I Must Scream_djvu.txt

Until you find out those were also built by a junior using an llm to help 🙃

You are correct.

For anyone else unaware, the schtick of the account was they’d always rate dogs with ratings of x/10 with x always being greater than 10. It was pretty funny how often people would get upset over this.

What you want is NIST 800-63b https://pages.nist.gov/800-63-3/sp800-63b.html#memsecret

Specifically sections 5.1.1.1 and 5.1.1.2.

Excerpt from 5.1.1.2 pertaining to complexity and rotation requirements:

Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or prohibiting consecutively repeated characters) for memorized secrets. Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.

Appendix A of the document contains their reasoning for changing from the previous common wisdom.

The tl;dr of their changes boil down to length is more important than any other factor when it comes to password security.

Edit to add:

In my personal opinion, organizations should be trying to move away from passwords as much as possible. If your IT team seems to think this system is so important that they need to rotate passwords every month, they should probably be transitioning to hardware security tokens, passkeys, or worst case, password with non-sms MFA.

Now I know nothing about the actual circumstances and I know there are plenty of reasons why that may not be possible in this specific case, but I’d feel remiss if I didn’t mention it.

Any organization still doing this is a decade behind best practices. NIST published new recommendations years ago that specified getting rid of the practice of regular forced password resets specifically because they encourage bad practices that make passwords weaker.

Of course it doesn’t help that there are some industry compliance standards that have refused to update their requirements, but I don’t know of any that would require monthly password changes.

They actually have a fairly comprehensive training program setup through their “University.” They also mix in foreign contractors, usually from China.

My dad cracked three ribs while surfing in his 20s. He caught a wave much larger than normal, fell off his board near the top and landed flat on his back.

My sister actually gave my daughter this book when she was young. I thought it was good stuff.

https://www.akpress.org/aisforactivist.html

I almost did before the outage. Their pay was pretty low compared to similar positions at other companies though.

They’re about raising the sarcophagus. Those things can be heavy.

One of my favorite T-shirts. https://www.teepublic.com/t-shirt/23763923-utc-or-gtfo

(I am not affiliated in any way with this shop)

Magic carpet 2, the Netherworlds is one I played a ton and think of from time to time. I wonder what I modern remake would be like.

It’s the first game I remember playing with deformable terrain.

Nope, it was Gmail and I know it’s the correct account because I have other emails regarding that account going back a few years including confirmations and a password reset.

I did check spam at the time. I really tried to give them the benefit of the doubt but all I can figure is my account slipped through some weird crack. It’s likely I never would have even known if it weren’t for my kid asking me one day if we could play together.

I did check that at the time as well. Nothing was there.

Doubt all you like. I checked multiple times after opening a ticket to make sure I hadn’t missed something. I would actually be a lot less annoyed with them if I had.

I did. Unfortunately the chain ended with repeated canned responses to me that the grace period had ended and the only way I could get access again was to repurchase the game.

So did most of my friends, but I checked multiple times and confirmed that I had nothing. I would have been a lot less annoyed with them if I had received an email and missed or ignored it. For whatever reason, the notifications never made it to me.

I’m one of those people. I haven’t played in years. I may never have played again. I only found out because my daughter is now at an age where she asked if we could play together. I received no notice from Microsoft and I don’t do social media so it was a complete surprise to me when I couldn’t log in, then find out through their support that I had lost access to something I had legally paid for.

I worked at a grocery store in 2003 in California for a short time. I joined just after a major strike had ended. As always, the company was pushing for lower wages and benefits, the union wanted higher. They came to an agreement with a two tiered system, tenured employees got to stick with a pay scale and benefits slightly better than what they’d had before.

New employees got fucked.

A couple months in I was promoted to cashier from bagger and got to see the two tiers. I was starting at $18 per hour, the original tier started at more than double that and went up pretty high.

Not really related to your comment, but I’m a little drunk after a rough day and seeing those amounts just really fucking pisses me off. My numbers are not adjusted for inflation and wages have gone down for the job I did in the last 20 years. It’s fucking maddening.