Identigral

We are advisors and engineers who use technology to solve problems by focusing on people and processes. 𝐹𝑖𝑑𝑒 𝑠𝑒𝑑 𝑐𝑢𝑖 𝑣𝑖𝑑𝑒.

[Identigral @identigral]

SEC sued SolarWinds (SW) for poor InfoSec practices. The thrust of the lawsuit is SW misleading investors regarding SW risk controls, incl. a password policy (!). Even if they do not prevail in court, bringing action is a shot across the company boards' bow. Nice one, Gary.

[Identigral @identigral]

SAML is far from dead: testimony by @davidjbrossard at @Identiverse '23 regarding customer/implementation challenges at @Salesforce : https://t.co/3A8snvet5U

[Identigral @identigral]

$OKTA Q2 earnings: Workforce vs CIAM (Auth0 + "legacy" Okta) ACV split is 60/40 but growth vs '22 is about even. Taken together it's a somewhat...interesting result.

[Identigral @identigral]

Data (CDP, Tableau, Mulesoft) growing faster than other segments. On the earnings call, mgmt chanted the mantra of AI + Data as both vision and R&D spend. Three "zones" of AI: Einstein, Gen AI, Autonomous (agents). AI applied in in Slack, Data (segmentation), Service Cloud.

[App Economy Insights @EconomyApp]

$CRM Salesforce Q2 FY24:

• RPO +12% Y/Y to $24.1B.
• Revenue +11% Y/Y to $8.6B ($70M beat).
• Non-GAAP op. margin 32% (+12pp Y/Y).
• Non-GAAP EPS $2.12 ($0.24 beat).

FY24 guidance
• Revenue +11% Y/Y to $34.75B (+$150M).
• Non-GAAP op. margin ~30% (+2pp Y/Y).

[Identigral @identigral]

@JefTek @divinetechygirl Thread on a sweater type of problem. Long tail of dependencies => cost of change management and maintenance for end-to-end workflow. Turn the question around: how will this action increase revenue or lower COGS for the business? If cost or risk avoidance, then please quantify.

[Identigral @identigral]

@Alex_A_Simons @ArvindHarinder Does cross-tenant sync work for B2B -> B2C? Docs only mention B2B. Have a customer who's interested in this scenario, would be nice to skip PS scripting.

[Identigral @identigral]

"Fun", real-world example of how challenging it is to walk the UX/security line when humans are involved. So what if Trusted Relationship is a known attack vector, mitigation beyond basic is costly due to asymmetric impact. Arguably, detect+term via the Law is a cheap alt route

[Matt Levine @matt_levine]

We are not just recklessly making a newsletter. We are focusing on one theme, which is Money Stuff. https://t.co/cvJDVjzEpi

[Identigral @identigral]

@salesforcedocs The doc on combining Tooling requests via Composite could use an update https://t.co/aw5Bb71sKS

[Ryan Petersen @typesfast]

Flexport is organizing an airlift of humanitarian relief supplies to refugee centers in Eastern Europe. You can help by donating to pay for more flights at https://t.co/VeICNUErlE. 🧵👇

[Identigral @identigral]

@salesforcedocs doc bug: the Sforce-Duplicate-Rule-Header example at the end of https://t.co/ssIJBYoK7q contains unrendered doc markup

[Identigral @identigral]

@jaminball The folks who wrote this could have padded the numbers in a more...readable manner by using cust_o_mers or custOmers. Don't need a natural language model to parse snake_case or camelCase.

[Identigral @identigral]

OpenID Connect: fun with the spec wording of "audience must be an array of strings" without specifying the type of array and its interpretation by OPs/RPs. In this case the players are @azuread and @salesforce https://t.co/FSLZfMCg5k

[Identigral @identigral]

@itickr The content feels like the oAuth scope conversation all over again re: human-readable explanation. For example, Google Account prompt says you're authenticating to 'https://t.co/LDizxtgrdR' regardless of the targeted service. The grey pop-up is like a brick in your window.

[Identigral @identigral]

@jaghub @Apple @salesforce Control over entire experience, including chain of custody and exclusion of possible issues due to ecosystem/3rd parties. Vertical integration has always been Apple's theme.

[Identigral @identigral]

Google Project Zero vs AWS IAM and GCP IAM with predictable results. "A strong developer might be able to reason about all security pitfalls of their own software, but it becomes very difficult once a complex external service comes into play". Most IAM services are external, yay!

[Felix Wilhelm @_fel1x]

Enter the Vault: Authentication Issues in HashiCorp Vault https://t.co/RJeGmQ517o

[Identigral @identigral]

@dunnry @tonyszko @vibronet Quest 1 -- good to go w/o a FB account until Jan 2023.

[Identigral @identigral]

If Martin Fowler has trouble with oAuth, what about all other devs? This Patreon -> Slack integration is a good litmus test for evaluating no-code/low-code platforms with effort to implement as a comparison metric. (Google says Apps Script is low-code, a debatable assertion).

[Martin Fowler @martinfowler]

new post: a friend needed a simple script, but isn't familiar with the command line. So here's my observations on using a Google Sheets script for the job.

https://t.co/wQzNa0eZMt

[Identigral @identigral]

@manicode We've heard this and similar confuzzled terms from users many times. It makes sense to them as an outcome - usually hashing or some attack/mitigation scenario such as stolen laptop vs encrypted drive. "We encrypt our passwords" is very common.

[Identigral @identigral]

@MichaelDell @EliasatDell Same machine is now dead due to another issue. Product is still under premium warranty with Next Business Day On-Site. Service request was opened 2 days ago. Requesting ETA from support leads to "please wait" answers. Your NPS score is trending to -100

[Identigral @identigral]

@MichaelDell @EliasatDell We've been going back and forth with @DellCares for past 3 weeks on a simple issue with our XPS laptop. We paid a premium for Next Business Day On-Site support and have gotten negative ROI. There should be a better way, your brand is losing its appeal.

[Identigral @identigral]

@matt_levine Your top 3 footnote-obsessed writers? Our list: 1. Nabokov 2. DFW 3. Edward Gibbon