Ben Vaughn

Fairly okay security guy. Affable. Views are my own.

[Ben Vaughn @bivaughn]

Blake Treinen with moustache looks like The Lorax

[Fabian Bader @fabian_bader]

I finally came around and documented all the Conditional Access bypasses in a single blog post. It contains not only the documented bypasses, but also the results of new research.

#Entra #ConditionalAccess #Security #Cheese

https://t.co/YWBfY0NhHl

[Ben Vaughn @bivaughn]

@SilvermanJacob iirc you can capture recovery codes, save them in your password manager, and turn off everything else. For someone like you I would recommend doing as much as possible to protect your account

[Ben Vaughn @bivaughn]

@SilvermanJacob Did you go Yubikey all the way and remove recovery options? I remember us conversing about this

[Ben Vaughn @bivaughn]

@TheSuzieHunter I thought sabering a cork out into the night 800 feet above Chicago would have been tops. But this is pretty amazing.

[Ben Vaughn @bivaughn]

@thee_SACK The bob ross of the dance music community

[Ben Vaughn @bivaughn]

@messycupcakes I'm here. It's fun, weather is great too -- not as cold as past years.

[Ben Vaughn @bivaughn]

@TheSuzieHunter You smile so much now. It really warms the hearts of everyone you touch. :)

[Ben Vaughn @bivaughn]

@TheSuzieHunter So proud of / happy for you, my dear friend

[Ben Vaughn @bivaughn]

@messycupcakes I think the sensation I have had about it is that it is not a music festival. It's a thing that has music at it. I like music but I don't think I wanna go to the thing

[Ben Vaughn @bivaughn]

@SilvermanJacob "Kitten" is crowdstrike's nomenclature for iranian state actors. Based on the persian cat, if I am not mistaken.

[Ben Vaughn @bivaughn]

@SilvermanJacob Future sequels can just be common accountant job titles: Accountant 3 - Staff Accountant, Accountant 4 - Forensic Accountant and so on

[Ben Vaughn @bivaughn]

@messycupcakes Gotta disagree with you here MC. At the very beginning of the teasing phase for TLG a lot of their socials left open to interpretation that they were breaking up/the upcoming album might be their last. When the song came out they told the story but before that it was a mystery

[Ben Vaughn @bivaughn]

@SilvermanJacob I think another poster suggested ensuring your account allow Passkey or Yubikey -- and only those methods -- for signin. Highly recommend this advice. Feel free to inquire if you ever have any questions about securing your stuff

[Ben Vaughn @bivaughn]

@SilvermanJacob This seems about normal if your account is broadly known / has been seen in credential dumps from other providers. Threat actors take those dumps and then mass-scan services for exposures slowly.

[Ben Vaughn @bivaughn]

@messycupcakes Borough Market is awesome!

[Ben Vaughn @bivaughn]

@sama It's a major bummer that you don't give enterprise customers a subdomain option. Makes it very very hard to control traffic through DNS filters and proxies.

[Ben Vaughn @bivaughn]

@messycupcakes I have literally a dozen in my closet if you stop by I'll give you two

[Ben Vaughn @bivaughn]

@messycupcakes The power converter (plugs into wall, has a USB socket) is solid-state equipment that very rarely breaks or goes bad and is essentially universal (any converter works with any USB cable.) They are everywhere, and if every new device came with one that would hugely increase waste