Grant Dasher

Updated light display this year: new more scalable control PCB design (finally compatible with xlights fseq files), more complex effects, relays to drive the flood lights, and of course more pixels!

⬇️⬇️⬇️

@ethanadoor @EricaZelic @CISAgov We do indeed!

@EricaZelic @CISAgov You can open an issue suggestion in the repo! github.com/cisagov/ScubaG… I promise they look at them. :) (cc: @GrantDasher )

Hey @CISAgov , for SCuBA Guidelines related to Power Platform, will you please consider adding a recommendation to enable logging in every environment as well as Analytics to populate the Power Platform Security Center?

Another successful Halloween this year!

For those at @AuthenticateCon next week, @IdentityZackand I will be moderating a great public sector track on Tuesday - featuring speakers from @NISTcyber @CISAgov @logindotgov @federalreserve and @migovernment!

Welcome @CooleyDeb !

Sad to be missing @Identiverse this year, but looks like a great event!

We took the day off and traveled to get some great shots of the Eclipse. First time for me seeing full totality.

@fabian_bader @IDMKen @ethanadoor @CISAgov We don't have anything against AMA, but for admining AD or AAD itself we definitely recommend separate admin accounts using at worst user name hints (to share a smartcard) and ideally separate cards or FIDO tokens, depending on what vintage of environment one is in.

@fabian_bader @IDMKen @ethanadoor @CISAgov This isn't a CISA page as Ethan said. No clue the origins of that particular line, which likely dates from eons ago.

Has anybody an idea why @CISAgov is recommending against the use of Authentication Mechanism Assurance for privileged users. #AD #SCRIL #Security idmanagement.gov/implement/scl-…

👉Since last summer, we’ve worked closely with @Microsoft, @OMBPress, & @ONCD to advance Security-By-Design. As part of this ongoing work, we’re pleased that expanded logging capabilities will now be available to all federal agencies. Learn more: go.dhs.gov/JPS

Perfection! The Michigan Wolverines are national champions! #GoBlue

Many federal services already support it and more are coming as agencies implement compliance with OMB M-22-09.

There is more that is needed, especially to make passkey's viable in the enterprise and to solve remaining interoperability issues. But its great to see this technology getting recognition.

Bullish article on passkeys. As we say at CISA, this technology is the gold standard for MFA and can eliminate entire classes of attacks when employed.

Lots of work went into these baselines. We're taking an agile approach so they will evolve as capabilities and threats change. Also make sure to check out our github.com/cisagov/scubag… tool where we just released version 1.0.0 to automate conformance testing for the baselines!

First year in our new house means it's time for a programmable tree. Custom controller PCB worked like a charm, because...why not. It's definitely not up to @RGB_Lights or Great Christmas Light Fight standards but that's what next year is for, right?

We brewed a magical potion for our trick or treaters this year and it was a big success. Though neighborhood competition is stiff!