[email protected]

Dev. I build for the cloud. Squirrel chaser extraordinaire, building identity and security systems. Ex-Microsoft.

[[email protected] @AzureAndChill]

@usgraphics I had a Saab which had ‘night panel’ and dropped the dash lights except the Speedo up to a certain speed (and would selectively light up more when you got close)

[[email protected] @AzureAndChill]

@ajhodls The market for tv data collection is much larger and more lucrative tho

[[email protected] @AzureAndChill]

@mkristensen Never but if I don’t see them I assume the file is broken or unloaded so they are a nice visual

[[email protected] @AzureAndChill]

@usgraphics Thanks. This whole picture is such a vibe of a time lost

[[email protected] @AzureAndChill]

@usgraphics What type is ‘KING EDWARD SHERATON’ written with? In the reflection

[[email protected] @AzureAndChill]

@merill We had a fun issue where seems AAD is spitting out huge authorization codes and that’s breaking IIS fedramp STIGs for max query string length. FR says 2048 max qs, but we were getting 2k+ auth codes back. So of course we look to PAR and it led to that doc

[[email protected] @AzureAndChill]

lol @merill this certainly seems like a bold statement. any idea why PAR will *never* be supported? is it a scale problem or something else?

[[email protected] @AzureAndChill]

@trufflesec Seems the better solution would be for google to fix their subject bug (if it’s actually a bug) and use a workspace-specific issuer. Have you or the mysterious ‘staff engineer’ confirmed the subject variability isn’t related to account or privacy related changes?

[[email protected] @AzureAndChill]

@jaredhanson lol that whole post is ‘we did the thing explicitly forbidden by the spec and proved the spec was correct in forbidding it’ 🤦‍♂️

[Hater Report @HaterReport]

Bruh the Hornets announcer gonna die on air one day 😂😂😂 https://t.co/bJAwCoZLcH

[Okayplayer @okayplayer]

A golden era of Hip-Hop: Slum Village 🙌🏾

[Gergely Orosz @GergelyOrosz]

This is the third serious security breach at Okta in ~2 years.

Okta sells security as a service: and yet it cannot secure itself. In the past we know it did not follow security 101. Yet another inexplainable incident.

Who can trust Okta after all this?

[[email protected] @AzureAndChill]

@shanselman @Stuartq I have oasis and scribe. Scribe is great for notes and too big for reading. Oasis is perfect and the physical page buttons are exactly what I’m after. I just checked and there’s one left

[[email protected] @AzureAndChill]

@Aaronontheweb That whole thread 😳

[[email protected] @AzureAndChill]

@mrandystevens @GuyDealership I had an XC90 recharge service loaner and loved the electric only bit. But it was like $80k+ which is silly

[maybe: k*rk @a_dose_of_wx]

Some thoughts and observations to the state and federal response to historic flooding in Western NC from Hurricane Helene

Its not sinking in to outsiders, or it’s just so hard to comprehend that the countless roads in Western N.C. , simply no longer exist.

The state and federal response has been ongoing, with over 1,000 personnel, including National Guard assets, deployed according to FEMA. Disaster Declaration for NC have been expedited, approved, but…

Those crews cannot traverse over collapsed bridges, 100+ foot ravinesthat weren’t there before.

Main interstates I-40 and I-26 have collapsed.

Primary state routes are scoured.

The secondary roads into neighborhoods are effectively eviscerated, for miles. Survivors *can’t* get out, help *can’t* get in.

It’s hard enough to get into Asheville. 30 minutes drives take 8-12 hours with the roads not existing, the remaining gas stations swamped. To get into the towns in villages in the mountains is a days journey if possible at all. National Guard trucks with food and water have to stop and collapses. The tools and supplies for SAR aren’t getting in via road.

Similar to Hurricane Katrina, where boats and helicopters were the only viable means of aid delivery in the first days, air support is currently the most effective way to connect Western NC to the outside world. There’s a limited amount of helicopters operating. Although the water has receded, the roads are still impassable.

This is still very much an active search and rescue mission not a recovery. There is a high number of missing (in the thousands per state media) because people can’t get in touch with loved ones. We saw this after Hurricane Ian as well, that number will drop significantly when phone service/internet returns. For death toll and recovery, the final number will not be known for at least a month in the region.

The lack of media presence on the ground isn’t due to neglect—reporters can't get into many areas, for the same reason help can’t. Even if they could, there is phone and internet do not exist.

This is not going to be a quick recovery for anyone. Some rural parts of Western NC may not be rebuilt.

[[email protected] @AzureAndChill]

@JefTek None I have set - most of these are older tenants or have sec defaults

[[email protected] @AzureAndChill]

ok Entra AAD people - create new user, first sign in, 'more information required' --> 'you can't access right now'

this is on multiple tenants. can't reset MFA, can't transfer MFA to new devices, etc. what do you think @JefTek

[[email protected] @AzureAndChill]

@charlesfitz @QuinnyPig @salesforce Is this really 8 years old? Amazingly prescient

[[email protected] @AzureAndChill]

identity vendors: "use asymmetric secrets! why does no one use them???"
also identity vendors: "generating assertions is an implementation detail, GFY"