I'm pleased to report that I've just submitted the final capstone paper for my master's degree in cybersecurity!

#cybersecurity #infosec #freebsd #bastillebsd #learning #education

This dumb password rule is from Singapore Airlines.

`/[0-9]{6}/`

https://dumbpasswordrules.com/sites/singapore-airlines/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from PayPal.

Must be between 8 and 20 characters, no spaces, uppercase and lowercase, one symbol...

The rule limits special characters to !@#$%^&*(). but my current password has a "-" in it so someone decided to restrict this further which is totally backwards. Things are meant to get better not worse!

https://dumbpasswordrules.com/sites/paypal/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

CNN: Hacked traffic cameras and US intelligence: How a plot to kill Iran’s supreme leader came together

".... The traffic cameras on the streets of Tehran provided a real-time view of the targets.

Hacked years ago, the cameras allowed Israel to map the city in detail, establish patterns of movement, and build an intricate, complex picture of what was happening inside an enemy capital, according to an Israeli official. ..."

https://lite.cnn.com/2026/03/03/middleeast/us-israel-plot-kill-iran-khamenei-latam-intl

#cybersecurity #alpr #cameras

*** how much do you want to bet this same network exists within the US? Ring, Flock Cameras, generic security cameras of all types... traffic cameras... you name it. China? Israel? The US? Everyone? Anyone? Once you build the Panopticon... you never know who is peering through the other side.

#privacy #cybersecurity

This dumb password rule is from Kryterion Webassessor.

I was quite surprised to see this when I was registering for my Google Professional Cloud **Security** Engineer certification. Nice part is that they **don't allow quotes** as special character, so I assume there possibly might be some other issues on their backends. :-)

https://dumbpasswordrules.com/sites/kryterion-webassessor/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Fidelity.

No more than 20 characters and leave out characters commonly used by
programmers. We don't want you to hack the mainframe.

https://dumbpasswordrules.com/sites/fidelity/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

There's a new wave of spam - all around the Fediverse.

Please remember, there's no "Mastodon Moderation Team" sending out strange verification messages.

That's all spam.

#Mastodon #Fediverse #FediTips #Spam #CyberSecurity

This dumb password rule is from Deutsche Kreditbank AG (DKB).

Passwords for the online banking web frontend do not have a max length constraint, but using the same password to
log in to the official iOS DKB app requires the password to be no longer than 38 characters.

https://dumbpasswordrules.com/sites/deutsche-kreditbank-ag-dkb/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

🚨 New Video: Virtue is Inconvenient - The Nitrokey 3 Review

In my last video, I crowned the YubiKey 5 as the "King of Keys" but it has a fatal flaw. It is proprietary. For those of us who believe in digital sovereignty and the right to audit our own hardware, blind trust is not an option.

Then there is Nitrokey 3A NFC. It promises open-source firmware, transparent design, and code written in memory safe Rust. But does "open" actually mean "good?" Today, we look at whether the moral high ground is worth the inconvenience, why the Android experience might be a deal breaker, and who should actually buy this device.

Part 4 of the Sovereign Authentication series.

100% human made. #NoAI

▶️ YouTube: https://www.youtube.com/watch?v=7I65RPlxqdY

📺 PeerTube: https://gnulinux.tube/w/gtTcaBH4GTEKMunR8CUiaX

Support the mission: ☕ https://liberapay.com/terminaltilt

#TerminalTilt #NoAI #Privacy #Security #PasswordManager #Nitrokey #Yubikey #Yubico #FOSS #OpenSource #Linux #Cybersecurity #SelfHosted #DeGoogle #DigitalSovereignty #QueerCreator #DisabledCreator #HumanMade #TechEthics

This dumb password rule is from Benergy4.

12 to 25 characters, only these special chars allowed: @+/'!#$^?:,.(){}[]~-.
Also, security questions.

https://dumbpasswordrules.com/sites/benergy4/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Taco Bell.

Password may include special characters, except for #.

https://dumbpasswordrules.com/sites/taco-bell/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from EON.

By the time I'd finished reading the rules I've forgotten all of them.

https://dumbpasswordrules.com/sites/eon/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Suncorp.

To "improve security" and "be password savvy", passwords must:
- be six to eight characters long
- Contain both numbers and letters
- Include upper and lowercase letters

https://dumbpasswordrules.com/sites/suncorp/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Entwickler.de.

Your password must be 12-20 characters.

https://dumbpasswordrules.com/sites/entwickler-de/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from IKEA.

Dumb restriction for consecutive similar characters. Wonder if someone got more that 2 identical characters in their name then
it won't allow you to even use name in password.

Password must contain:
- 8-20 characters
- **No more than 2 identical characters in a row**
- A lowercase letter (a-z)
-...

https://dumbpasswordrules.com/sites/ikea/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from NBA Store.

- Password cannot be longer than 20 characters

https://dumbpasswordrules.com/sites/nba-store/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

I like this use of absolute time rather than relative time.

When you see that a code expires "in 5 minutes" you have no way of knowing how long it has taken to get to your inbox.

#2FA #MFA #CyberSecurity

Alt...

Hello Terence, When prompted, enter the code below to authenticate in example.com 854037 This code will expire today at 09:31 GMT.

Amusing; the young woman working the hotel breakfast sees “#securitay” on my jacket and asks what that is. It’s a #cybersecurity conference hosted and run by the students in Abertay Uni’s Ethical Hacking and Cybersecurity masters program. She is a student at Abertay and her flatmate is in the program. And she had no idea this was going on (possible that her flatmate is not involved). But she’s gobsmacked that I would fly all the way from DC to be here. I’m wearing my “Securi-Tay 3” shirt. I think that was 2011.

#securitay2026

This dumb password rule is from Banco Mercantil.

8 to 15 chars. No special chars allowed but requires special chars. Also
requires lowercase, uppercase, and numbers. Consecutive chars are
prohibited. Did I mention the page hangs while you type? That eye icon
tho.

https://dumbpasswordrules.com/sites/banco-mercantil/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from SecureAccess Washington.

Central authentication for all Washington State services
(DoL, ESD, etc).

Password must have *exactly* 10 characters, but form happily
lets you enter more and only throws errors after submit,
providing no useful feedback.

https://dumbpasswordrules.com/sites/secureaccess-washington/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Aetna Health Insurance.

- Password cannot be longer than 20 characters
- Password cannot have spaces and more 2 characters repeated in a row
- Password cannot have user's first name, last name or username

https://dumbpasswordrules.com/sites/aetna-health-insurance/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from AT&T.

The only special characters allowed are underscores and hyphens.

https://dumbpasswordrules.com/sites/at-andt/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Air Miles.

- Exactly 4 numbers.

https://dumbpasswordrules.com/sites/air-miles/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from CVent.

Password Rules
- 8 to 20 characters with at least 1 number and 1 letter.
- No symbols or spaces.

https://dumbpasswordrules.com/sites/cvent/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

🆕 blog! “Reading NFC Passport Chips in Linux”

For boring and totally not nefarious reasons, I want to read all the data contained in my passport's NFC chip using Linux. After a long and annoying search, I settled on roeften's pypassport.

I can now read all the passport information, including biometrics.

👀 Read more: https://shkspr.mobi/blog/2025/06/reading-nfc-passport-chips-in-linux/
⸻
#CyberSecurity #hacking #linux #nfc #rfid

Putting VPNs behind an age wall threatens our privacy.

They keep young people safe from harassment. Business networks secure. Journalists, campaigners and whistleblowers shielded from harm.

Privacy is online safety ✊️

Sign the petition to protect VPN use in the UK ⬇️

https://action.openrightsgroup.org/tell-government-protect-vpn-use-uk

#vpn #privacy #cybersecurity #ageverification #ukpolitics #ukpol

This dumb password rule is from AOL.

Between 8 and 16, so I can't go up to 20.

https://dumbpasswordrules.com/sites/aol/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

🚨 New Video: YubiKey 5 Review - Security Essential or Overpriced?

The "Industry Standard" is usually a warning sign.

In this video, we are looking at the YubiKey 5 NFC and 5C NFC. These are arguably the best engineered security keys on the planet. They are injection molded, "violence-proof," and they work with just about everything. But for those of us in the Linux and FOSS community, they present a problem.

Can you trust a security tool if you aren't allowed to see how it works?

Part 3 of the Sovereign Authentication series.

100% human made. #NoAI

▶️ YouTube: https://www.youtube.com/watch?v=G44zJm-UwJQ

📺 PeerTube: https://gnulinux.tube/w/s9B6sBsjwh8ro2sHpZi86f

Support the mission: ☕ https://ko-fi.com/terminaltilt | https://liberapay.com/terminaltilt

#TerminalTilt #NoAI #Privacy #Security #PasswordManager #Yubikey #Yubico #FOSS #OpenSource #Linux #Cybersecurity #SelfHosted #DeGoogle #DigitalSovereignty #QueerCreator #DisabledCreator #HumanMade #TechEthics

This dumb password rule is from NBC (National Bank of Canada).

- Password length must be 8 to 25 characters
- Password must contain at least one lower letter (any position)
- Password must contain at least one digit (any position)
- Password cannot contain spaces.
- Copy/paste is not allowed when trying to set a new password

https://dumbpasswordrules.com/sites/nbc-national-bank-of-canada/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from CodePen.

The password should be of at least 8 characters and must include a number, special character, an upper as well as a lowercase letter

https://dumbpasswordrules.com/sites/codepen/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Easybank (Austrian direct bank).

- At least 8 and at most 16 (!) characters
- **Must start with 5 digits (do we really want to know what's going on there?)**
- At least one uppercase and one lowercase letter
- (Some) special characters are permitted, most are not
- "Simple" patterns are prohibited
- PINs are case sensitive (at l...

https://dumbpasswordrules.com/sites/easybank-austrian-direct-bank/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

Up your CTI game by knowing the correct threat actor names for executive briefings.

Security isn’t about being right, it’s about being accurate, after all:

https://addons.mozilla.org/en-US/firefox/addon/gayint-name-converter/

Courtesy of @gayint

#threatintel #cti #security #cybersecurity

This dumb password rule is from Itaú Bank.

I know, it's in spanish, let me translate this monstrosity for you.

- Allowed characters: letters A to Z uppercase or lowercase (ñ is not allowed), number 0 to 9, #, $, %, &, +, -, . :, ;, _.
- You must use 8 characters.
- The password must contain at least one letter and at least one number.
- ...

https://dumbpasswordrules.com/sites/itau-bank/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from NetBank (Commonwealth Bank of Australia).

When resetting your NetBank password, the website only informs you that you can create an alphanumeric password, despite the fact that you can use special characters.
And also, it's password strength calculation is shit.
An 155 bits of entropy password is "weak."
Additionally, passwords are case-...

https://dumbpasswordrules.com/sites/netbank-commonwealth-bank-of-australia/

#password #passwords #infosec #cybersecurity #dumbpasswordrules