lol @merill this certainly seems like a bold statement. any idea why PAR will *never* be supported? is it a scale problem or something else?
Bruh the Hornets announcer gonna die on air one day 😂😂😂 xitter.cf/HOODH3RO/status/185977…
This is the third serious security breach at Okta in ~2 years.
Okta sells security as a service: and yet it cannot secure itself. In the past we know it did not follow security 101. Yet another inexplainable incident.
Who can trust Okta after all this?
Some thoughts and observations to the state and federal response to historic flooding in Western NC from Hurricane Helene
Its not sinking in to outsiders, or it’s just so hard to comprehend that the countless roads in Western N.C. , simply no longer exist.
The state and federal response has been ongoing, with over 1,000 personnel, including National Guard assets, deployed according to FEMA. Disaster Declaration for NC have been expedited, approved, but…
Those crews cannot traverse over collapsed bridges, 100+ foot ravinesthat weren’t there before.
Main interstates I-40 and I-26 have collapsed.
Primary state routes are scoured.
The secondary roads into neighborhoods are effectively eviscerated, for miles. Survivors *can’t* get out, help *can’t* get in.
It’s hard enough to get into Asheville. 30 minutes drives take 8-12 hours with the roads not existing, the remaining gas stations swamped. To get into the towns in villages in the mountains is a days journey if possible at all. National Guard trucks with food and water have to stop and collapses. The tools and supplies for SAR aren’t getting in via road.
Similar to Hurricane Katrina, where boats and helicopters were the only viable means of aid delivery in the first days, air support is currently the most effective way to connect Western NC to the outside world. There’s a limited amount of helicopters operating. Although the water has receded, the roads are still impassable.
This is still very much an active search and rescue mission not a recovery. There is a high number of missing (in the thousands per state media) because people can’t get in touch with loved ones. We saw this after Hurricane Ian as well, that number will drop significantly when phone service/internet returns. For death toll and recovery, the final number will not be known for at least a month in the region.
The lack of media presence on the ground isn’t due to neglect—reporters can't get into many areas, for the same reason help can’t. Even if they could, there is phone and internet do not exist.
This is not going to be a quick recovery for anyone. Some rural parts of Western NC may not be rebuilt.
ok Entra AAD people - create new user, first sign in, 'more information required' --> 'you can't access right now'
this is on multiple tenants. can't reset MFA, can't transfer MFA to new devices, etc. what do you think @JefTek
identity vendors: "use asymmetric secrets! why does no one use them???"
also identity vendors: "generating assertions is an implementation detail, GFY"
Well in least surprising news of all time rabbitu.de/articles/security…
What is AAD v1.1? I came across this earlier this week but can't find much about it. login.microsoftonline.com/co…
hey #entra identity friends, the signing keys published in openid config and federation metadata match - is there any guarantee that those always match (outside of things like app-specific config)? I have an odd scenario and curious if it's documented anywhere one way or the other cc @merill @markmorow @JefTek
I would love to see a way to mark my domain’s #openid authority. As in, if a user is signing in with an account at my realm, look up a DNS record or something that points to my authority/openid-config
You gotta be kidding me, no way this is real. Have they never heard of APIs or oauth2? Please don’t type your passwords into other people’s computers 🙁
This quoted post is unavailable.
I looked at @HeyKinde today and it seems I can define APIs but not API scopes? how is that useful?




















