Dev. I build for the cloud. Squirrel chaser extraordinaire, building identity and security systems. Ex-Microsoft.

Charlotte, NC
Joined June 2009
lol @merill this certainly seems like a bold statement. any idea why PAR will *never* be supported? is it a scale problem or something else?
1
352
Bruh the Hornets announcer gonna die on air one day 😂😂😂 xitter.cf/HOODH3RO/status/185977…
179
2,462
362
28,372
1,402,205
A golden era of Hip-Hop: Slum Village 🙌🏾
20
268
25
1,356
50,076
This is the third serious security breach at Okta in ~2 years. Okta sells security as a service: and yet it cannot secure itself. In the past we know it did not follow security 101. Yet another inexplainable incident. Who can trust Okta after all this?
52
240
23
2,197
388,831
Some thoughts and observations to the state and federal response to historic flooding in Western NC from Hurricane Helene Its not sinking in to outsiders, or it’s just so hard to comprehend that the countless roads in Western N.C. , simply no longer exist. The state and federal response has been ongoing, with over 1,000 personnel, including National Guard assets, deployed according to FEMA. Disaster Declaration for NC have been expedited, approved, but… Those crews cannot traverse over collapsed bridges, 100+ foot ravinesthat weren’t there before. Main interstates I-40 and I-26 have collapsed. Primary state routes are scoured. The secondary roads into neighborhoods are effectively eviscerated, for miles. Survivors *can’t* get out, help *can’t* get in. It’s hard enough to get into Asheville. 30 minutes drives take 8-12 hours with the roads not existing, the remaining gas stations swamped. To get into the towns in villages in the mountains is a days journey if possible at all. National Guard trucks with food and water have to stop and collapses. The tools and supplies for SAR aren’t getting in via road. Similar to Hurricane Katrina, where boats and helicopters were the only viable means of aid delivery in the first days, air support is currently the most effective way to connect Western NC to the outside world. There’s a limited amount of helicopters operating. Although the water has receded, the roads are still impassable. This is still very much an active search and rescue mission not a recovery. There is a high number of missing (in the thousands per state media) because people can’t get in touch with loved ones. We saw this after Hurricane Ian as well, that number will drop significantly when phone service/internet returns. For death toll and recovery, the final number will not be known for at least a month in the region. The lack of media presence on the ground isn’t due to neglect—reporters can't get into many areas, for the same reason help can’t. Even if they could, there is phone and internet do not exist. This is not going to be a quick recovery for anyone. Some rural parts of Western NC may not be rebuilt.
242
3,400
366
9,689
1,210,147
ok Entra AAD people - create new user, first sign in, 'more information required' --> 'you can't access right now' this is on multiple tenants. can't reset MFA, can't transfer MFA to new devices, etc. what do you think @JefTek
427
identity vendors: "use asymmetric secrets! why does no one use them???" also identity vendors: "generating assertions is an implementation detail, GFY"
88
Well in least surprising news of all time rabbitu.de/articles/security…
You gotta be kidding me, no way this is real. Have they never heard of APIs or oauth2? Please don’t type your passwords into other people’s computers 🙁
160
Looks like RCS is working on iOS 18!
170
What is AAD v1.1? I came across this earlier this week but can't find much about it. login.microsoftonline.com/co…
109
hey #entra identity friends, the signing keys published in openid config and federation metadata match - is there any guarantee that those always match (outside of things like app-specific config)? I have an odd scenario and curious if it's documented anywhere one way or the other cc @merill @markmorow @JefTek
492
I would love to see a way to mark my domain’s #openid authority. As in, if a user is signing in with an account at my realm, look up a DNS record or something that points to my authority/openid-config
1
182
*David Attenborough voice: "here we see the majestic visual studio in it's natural state"
2
110
You gotta be kidding me, no way this is real. Have they never heard of APIs or oauth2? Please don’t type your passwords into other people’s computers 🙁
This quoted post is unavailable.
1
1
333
I looked at @HeyKinde today and it seems I can define APIs but not API scopes? how is that useful?
1
173
happy 10th anniversary to this storage account
2
273