Bognar

7 ms·

31.
by Bognar 2y ago
Per Microsoft's write-up: > Storm-0558 acquired an inactive MSA consumer signing key and used it to forge authentication tokens for Azure AD enterprise and MSA consumer to access OWA and Outlook.com. All MSA keys active prior to the
32.
by Bognar 2y ago
Aborting threads has issues in most languages. Timing out an operation however is a solved problem with many safe implementations.
33.
by Bognar 2y ago
> Is there a phrase that means the opposite of "attention to detail?" Every little detail is a shitshow I've used "fractally fucked" before, which I think is nicely evocative of how something is messed up at ever
34.
by Bognar 2y ago
3 of those are about Exchange and one is about Bing (involving AAD, but it was an AAD app that was misconfigured and not an AAD issue itself). The teams that run Azure are in entirely separate organizations with wildly different product sta
35.
by Bognar 2y ago
I discovered option D during covid and it's like a superpower. I have allergies even through double dosing OTC medicine, but a good mask does wonders for me in spring.
36.
by Bognar 2y ago
I think I've seen that in every contract I've ever signed.
37.
by Bognar 2y ago
I heard a different variant of this, which is that Jim Koch the brewer at Sam Adams is a functioning alcoholic who drinks a lot throughout the day. The yogurt and yeast is an unrelated thing that he claims to work.
38.
by Bognar 3y ago
We don't have any conclusive evidence about the universe's finitude nor its discreteness.
39.
by Bognar 3y ago
There's a more unfortunate interpretation, which is that whoever can afford the travel and time to not be at work is more likely to qualify. I know a fencer who was in his mid 20s consistently placing top 3 in every tournament he went
40.
by Bognar 3y ago
Can you take the snappy one liners back to Twitter? Or at least try to have them make sense. Guilt isn't necessary to be annoyed at someone's word choice. The chosen words are presenting an implication that eating animals is moral
41.
by Bognar 3y ago
CloudFlare has some TCP proxying features, but most of what you actually get from adopting CF (or any CDN) requires decrypting traffic because most of the features depend on understanding the HTTP requests.
42.
by Bognar 3y ago
Who is being personally attacked? The first owner who decided to flay a human corpse and wrap their personal items with it? I think "sick" is an appropriate adjective.
43.
by Bognar 3y ago
Flat taxes are inherently regressive as the poor have to spend a higher proportion of their money than the rich in order to live.
44.
by Bognar 3y ago
It's not at all the same thing? Also there's a more apt comparison, which is forcing Google to make Android open and allow alternative app stores (oh wait, they already do). App stores are a natural monopoly. An app store with mor
45.
by Bognar 3y ago
If you're using GHA to publish then you still need a trusted branch to provide secrets to. If you're not publishing using CI, then you can still upload to PyPI manually with an API Token. > without needing to give microsoft tot
46.
by Bognar 3y ago
Ah yes, because version control is only about file storage.
47.
by Bognar 3y ago
Having worked at GitHub, we used MySQL because we've always used MySQL. It works because the business depends on making it continue to work, and switching off at this point is a multi-year effort. Herculean efforts have gone into scali
48.
by Bognar 3y ago
Part of being a freelancer is spending time finding work and doing a variety of things that clients would consider non-billable but still cost time. If you're going to work 40 hours a week, not all 40 will typically be billable in free
49.
by Bognar 3y ago
Provenance artifacts via something like SigStore would go a long way, since it solves both key management and the linking of artifacts to their build process. For Go where you're just publishing sources with a build necessarily, you co
50.
by Bognar 3y ago
How do you validate that you're on a machine running secure boot? How about when you connect remotely?
51.
by Bognar 3y ago
Secure Boot also validates UEFI Option ROMs, not just bootloaders.
52.
by Bognar 3y ago
How far up the stack does the verification go? Most secure boot stacks give up after the initramfs because disk images are usually mutable. Do you make any attempts to go further?
53.
by Bognar 3y ago
I'm always curious what threat model that is valid against TPMs is not also valid against CPUs and main memory.
54.
by Bognar 3y ago
You can only extract the encryption key if using the unencrypted APIs. You can establish and require an encrypted channel with the TPM if you know which TPM you are expecting.
55.
by Bognar 3y ago
https://github.com/iovisor/bcc/blob/master/docs/reference_gu...
56.
by Bognar 3y ago
Mid-level backend engineer? Buy the book "Designing Data-Intensive Applications" and read it.
57.
by Bognar 3y ago
I love this analogy, interest rates on tech debt. It's such a natural extension of the phrase tech debt and succinctly gets a point across. I'm gonna have to steal that and start using it at work.
58.
by Bognar 3y ago
How do you deal with the same in Photoshop?
59.
by Bognar 3y ago
For both reasons mentioned above, yes. Even internally, many teams in Microsoft are shipping containers on Linux for prod services. Azure is also the big moneymaker, so these days they want all their technologies to have Linux support since
60.
by Bognar 3y ago
Microsoft uses C# internally and has a vested interest in making it better for all of its own developers, as well as making it good to increase industry adoption so it has a larger pool of skilled developers to hire from. Your arguments abo

More ›