Nist Password Guidelines

As most of you probably know, NIST recently updated their password guidelines. The three big changes are:

  1. Use long easy to remember passwords. Don’t worry so much about mixing in numbers and special characters.
  2. Don’t expire your users’ passwords—it only encourages bad password practices.
  3. For all but low-risk applications, use two-factor authentication.

The IEEE Spectrum has a Q&A with Paul Grassi, the author of the new guidelines. It’s a quick and easy read and will give you some valuable guidance as to dealing with your own passwords. He doesn’t mention password managers, which I still believe the be the best solution for generating high-entropy passwords and managing them safely.

If you want more information, take a look at the actual guidelines. They’re long and detailed and written in bureaucratese but cover all the material.

Posted in General | Tagged | 5 Comments

Marking a Word

Today I learned something new. Or, rather, I got hit in the head with a cluebat. Peter Hwang asked how he could mark the word at point. Manuel Uberti answered that he usually uses Ctrl+Meta+SPC, which I always think of as marking the s-expression at point. Of course, that’s where the cluebat comes in because, duh, an atom is an s-expression too.

On most keyboards, it’s easier to type Ctrl+Meta+SPC that it is to type Meta+@. At least it is for me. The nice thing is you can mark subsequent words by repeating the Ctrl+Meta+SPC.

On the other hand, both methods mark from point to the end of the word so if point is in the middle of the word, you may not get what you want. You can mark the word that the point is in with er/expand-region, Magnar Sveen’s excellent semantic marking utility. The problem with er/expand-region is that it’s usually hard to mark subsequent words because it will look for the smallest enclosing semantic unit, which is probably not the next word.

So my (new) strategy is to use er/expand-region to mark the word containing the point and then Ctrl+Meta+SPC to mark subsequent words if I need to. That means I have to switch from Ctrl+=, my binding for er/expand-region, to Ctrl+Meta+SPC, but that doesn’t seem as awkward as the other methods I’ve tried.

Posted in General | Tagged | 4 Comments

Ivy Initial Input String

If you’re an Ivy user—and you should be—you’ve probably noticed that sometimes the Ivy prompt will have an initial “^” so that the search will be anchored at the beginning of line. This happens depending on the command that called the ivy-read routine. If Ivy guesses wrong, you can always remove the “^” or add one.

Sometimes, though, it always guesses wrong for your particular work flow. I’ve just learned from this Emacs subreddit question that you can, to an extent, control when the “^” is appended to the prompt. Actually, you can specify any string to prepend.

The decision as to what to append is controlled by the ivy-initial-inputs-alist. Again, you can easily correct the default action at the time of the call so unless you have a situation where Ivy is always guessing wrong, it’s probably not worth changing the default value of ivy-initial-inputs-alist.

Posted in General | Tagged | Leave a comment

Setting Up a Lisp Development Environment

For a language as old as Lisp, there are a surprising number of queries asking how to set up a Lisp environment. If you’re a Lisper, your answer to this is probably Emacs/Slime/Quicklisp and one of the Lisp systems such as SBCL.

Baggers, who has several videos about Lisp, posted a nice video on setting up an Emacs/Slime/Quicklisp/SBCL system. He does this on a Windows system because it’s the most difficult system to get things going on. If you’re using Linux or macOS, the process is similar but not quite as fiddly. The video covers the whole process starting with downloading a copy of Emacs, setting up slime, downloading SBCL and installing Quicklisp.

I’ve often said that if you’re looking for a great Common Lisp system, it’s hard to do better than SBCL but n00bs may find it difficult to get things set up and working. Baggers’ video is an excellent how-to for setting up a Lisp system from scratch.

Posted in General | Tagged , , | Leave a comment

Emacs Lisp Development Tools

I just stumbled across a video of John Wiegley’s talk at the 2013 Emacs Lisp Development Conference on Elisp development tools. Wiegley covers some of the tools he uses in his own development. Many of those tools will be familiar to most Emacs developers but some were new to me. Three that I especially want to take a look at are redshank, elisp-slime-nav, and workgroups.

The talk is really interesting and helpful but sadly the production values of the video are terrible. Much of the time the screen shots are out of focus or someone is walking between the camera and display. Even so, it’s worth spending the hour watching it. Wiegley, of course, is a master Elisp developer and listening to what he has to say on the matter can help you develop your own skills.

The other interesting thing is how far we’ve come since 2013. Abo-abo’s swiper/ivy/counsel was not yet available, and Wiegley’s use-package was just beginning and not nearly as powerful as it is now. That was only four and a half years ago yet I would be missing half the tools I use every day if we were suddenly teleported back to the time of the conference.

The video is just over an hour so you’ll have to schedule some time but, as I say, it’s very worthwhile.

Posted in General | Tagged , | 5 Comments

An Elisp Introduction

A couple of years ago, I wrote about Aaron Bieber’s talk to the Boston Vim Meetup on why and how he moved from Vim to Emacs. It was a great talk and worth watching if you haven’t already (especially if you’re a Vim user thinking about switching to Emacs). One of the keys to becoming a journeyman Emacs user is gaining a familiarity with Elisp. You don’t have to be an expert but you should feel comfortable doing simple tasks such as configuration.

About a year ago, Bieber wrote a post on getting started with Emacs Lisp. It’s by no means a complete introduction but it does give you a feeling for how you would go about writing a small Elisp function. Without saying so explicitly, Bieber uses an incremental or interactive approach to building the function. That is, he builds and tests a small part of it and then moves on to expanding it, again incrementally.

As I’ve said many times, this is one of the most powerful things about programming with Lisp: you can try out very small parts of your solution without having to worry about building a scaffolding for testing. If, after you read Bieber’s post, you want to learn more Elisp, Xah Lee’s Elisp Tutorial is a good resource.

UPDATE [2017-08-27 Sun 15:01]: Fixed title of Bieber’s post.

Posted in Programming | Tagged , | 2 Comments

Apple’s Open Office

Managers and bean counters tell themselves all sorts of pretty lies to justify open office plans. It will increase collaboration, they say. Employees will know what the rest of the team is doing and be better able to solve problems, they think. Yet, somehow, despite all the putative benefits, these managers virtually never think it’s a good idea for them. That’s because deep down they know it’s really about being cheaper and they won’t have to endure it so why not?

Sadly, Apple has joined the list of companies that should know better but don’t. Their new headquarters is going to feature open office space for engineers, developers, and other employees. The employees aren’t happy. Some of those employees say they are planning to or considering leaving the company. It’s those engineers and developers that have made Apple the success it is. Inflicting the horror of an open office on them seems like an ungrateful—and ultimately self-destructive—thing to do.

Posted in General | Tagged | 5 Comments

A Little Red Meat for Emacsers

I don’t have anything interesting to say today so here’s a little red meat for Irreal’s Emacs lovers:

Posted in General | Tagged | 1 Comment

A Personal Emacs Package Repo

As longtime Irreal readers know, I don’t worry about my init.el very much. Rather than organize my configuration into separate, function-specific files like my more organized colleagues, I just throw everything into a single init.el. I keep thinking I should at least turn it into an Org file but until then, I’ve settled for converting my package configuration to the excellent use-package.

Dave Pearson is the anti-me. Not only has he broken out his configuration into separate files, he also took all those personal functions that most of us accumulate, packaged them up, and installed them in his own personal package repository. He hosts the repository on GitHub so it’s easy for him to sync his configuration to different machines.

If that sort of thing appeals to you, Pearson has written a how-to on building your own personal repository. It’s a straightforward procedure. The hardest part is probably building the packages that hold your functions. The nice thing is that once you’ve set up the archive on GitHub (or your favorite such place) you can start converting your functions to packages and uploading them at your leisure. Again, if this sounds like something you’d like to do, take a look at Pearson’s how-to for the details.

Posted in General | Tagged | Leave a comment

Note Taking with Org Mode

Heikki Lehväslaiho has a nice series of 4 blog posts on how he takes notes with Org mode. He lists the first three posts in each entry but not the fourth; it’s here.

The last two posts are particularly interesting. He talks about how he takes notes from his Elfeed buffer and from his phone. Elfeed has some built-in methods for capturing links but Lehväslaiho’s method makes it speedy and easy. If, like me, you’re more interested in forming Org mode links, it would be easy to slightly modify his elfeed-link-title function to make the link and perhaps query you for the link description instead of using the title.

If you’re using an Android phone, Lehväslaiho shows how to get notes from the phone into an Org file using a package he wrote. Sadly, it doesn’t appear to work for iPhones

Posted in General | Tagged , | 1 Comment