2026-11-04T23:16:36Z https://njump.me tmaher https://njump.me/npub1e52qzm4uzjry900xvkka3wxh07l7kgl6vecgka7q363ut5356vls9532ah https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/302/975/264/087/517/original/199d0dd6c5e8478b.jpg https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/302/975/264/087/517/original/199d0dd6c5e8478b.jpg https://njump.me/nevent1qqszm2afx57n4tmer5l3z5n66sqh2wg7slkkvmftecctzxqf0x9y6aczyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn7emk89v In reply to <a href='/nevent1qqs04l08g8p6yppcx2uzlzvg254x9ldrayzsyu7gmcprdzx5slkty0s7t5kl5'>nevent1q…5kl5</a><br/>_________________________<br/><br/>congrats! 2026-10-23T15:04:18Z https://njump.me/nevent1qqs9ugr0fykxz6gfz4f4nkdp9z9nlda6l4hyrmlv35y8ch988p7s2vqzyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn73290d2 In reply to <a href='/nevent1qqswxmp327pasu3fvstv9e6qyzwxppgv5utdru3cnntampt9hp5wefg42wmlm'>nevent1q…wmlm</a><br/>_________________________<br/><br/>happy anniversary 2026-10-21T09:50:09Z https://njump.me/nevent1qqs85nyyuhhlq8654k9lpl56azpkn55vgdjkar82hnvj96pc4ag6zfczyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn77c7s5y In reply to <a href='/nevent1qqsrwv3m08q9j96u65mu6er7qgj7tw8q3rpjzs3k78qh86jzp0a5m3crhl5nx'>nevent1q…l5nx</a><br/>_________________________<br/><br/>I will die angry that x509 name constraints never caught on. It wouldn’t have prevented the random number fail, but sure could have limited the blast radius.<br/><br/><a href="https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.10">https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.10</a> 2026-10-20T20:50:40Z https://njump.me/nevent1qqs9d6svuycvumgrs5n38q433j6egeft46xx6rheg3nu38ulqccqn3czyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn785l8sy In reply to <a href='/nevent1qqs9yvcl5k2ennquj830ypp3s53jhjlpzdl43vjrt5uemxad8trafnqn2wehy'>nevent1q…wehy</a><br/>_________________________<br/><br/>this is what I’m afraid of for Ireland’s new naturalization civics test they just announced. 2026-10-14T20:00:53Z https://njump.me/nevent1qqs80m589c5j9swr8nx0dlqnjurfpux5fl5amx28hwte5p0nrqa49eqzyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn77v9sqf In reply to <a href='/nevent1qqst424fdzu83a0gwrzdlcmxhupvmhcyp5h923ae979hnmukq6w7jmct9fjn6'>nevent1q…fjn6</a><br/>_________________________<br/><br/>This post raises my Ire 2026-09-25T12:14:55Z https://njump.me/nevent1qqspx0m9pkglhjfvs4qdwejayvg4ssqpffsevzq2n0zpcw72qqp9djgzyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn7mcjm64 In reply to <a href='/nevent1qqsthr0z7suzvau6832pvjuh8hky54ts0dyxpdc5st8mnuugnf08f6slh4zz2'>nevent1q…4zz2</a><br/>_________________________<br/><br/>thank you for the breakdown. I am trying really hard to fix my American biases, and I’m grateful for the reassurance this isn’t one of those times I’m biased. The signs are legit confusing ! 2026-08-14T11:37:07Z https://njump.me/nevent1qqs0tfhy0u4hjl5fg8v2tu6cmtnjavjvg42rs7j93pu0gvfqw5dp8pgzyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn7g4pvl9 In reply to <a href='/nevent1qqszphmte9ff8xyk264kwugg0ye4le7uaccgd4kpdarq332maf5ncsssfpwmh'>nevent1q…pwmh</a><br/>_________________________<br/><br/>preferred currency? 2026-08-10T09:52:56Z https://njump.me/nevent1qqsyr5xxwlgaax95rrjswcrhp6jwkka6etuqlav993c7khkc3dpzvuqzyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn7qr6ayx In reply to <a href='/nevent1qqs904ds8qqx2r57uplqytrrz8l9pnd5vx7mt8nuwf2l49uf6dnwc5qvys28r'>nevent1q…s28r</a><br/>_________________________<br/><br/>The big red eye looks like it’s in a broken summoning circle. This is beautiful. 2026-08-04T12:20:52Z https://njump.me/nevent1qqs8rxpfqcp06w5u77tsm6jwuj7p6aqu0ypqu89d70czrapg0tk3mwqzyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn774enfc In reply to <a href='/nevent1qqsra3e0hrxn3t0mdr9aaczvz58c8uvdwzewlm6gnw68860e8uzd3xce9mkkc'>nevent1q…mkkc</a><br/>_________________________<br/><br/>oh I see <a href="https://www.itu.int/rec/dologin_pub.asp?lang=e&amp;id=T-REC-X.680-202102-I!!PDF-E&amp;type=items">https://www.itu.int/rec/dologin_pub.asp?lang=e&amp;id=T-REC-X.680-202102-I!!PDF-E&amp;type=items</a><br/><br/>In the data structures themselves. Yea I would be very interested in an example of it being Turing complete 2026-07-07T21:15:14Z https://njump.me/nevent1qqs00qtpa7cjas8d04dx0w4wz7uu9pfax696ydd4tklmszlu6vwn7hszyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn7shz5lw In reply to <a href='/nevent1qqs88v48jscu7dk5qmals8d73cvlasamacray9sl2sgujg0rqh5fq5grzwws6'>nevent1q…wws6</a><br/>_________________________<br/><br/>maximum gayness in all things.<br/><br/>I don’t think it is. There’s no branching or flow control that I know of. Maybe there’s some trick in the module import feature that gets you to recursion accidentally. I’m very much not a theorist, though.<br/><br/>What’s the Yes argument? 2026-07-07T20:29:06Z https://njump.me/nevent1qqsykt9u7kxxrqhtj597skf2nv40x3kk8z6g73qpc9h5dg35hq5w57qzyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn7thd0nf In reply to <a href='/nevent1qqstsvfkv03n2gze9vykfsd2uzqrsswal7rzn6kdzfchssxv3kzlxssgj74l8'>nevent1q…74l8</a><br/>_________________________<br/><br/>where are you seeing reference to symmetric keys? <br/><br/>In the Technical Details section on Actor Tokens, it says “These hybrid setups used to provision a certificate credential on the Exchange Online Service Principal (SP) in the tenant, with which it can perform authentication.” . Adversary would then use the (x509) cert (and private key) to authN to eSTS (the Entra IdP), get one of these wacky “Actor Tokens” that AAD Graph doesn’t validate properly. <br/><br/>eSTS does support both x509 and client secrets for an SP to authN, but client secrets are just CSPRNG-generated passwords. They’re bearer tokens, not symmetric AES or RC4 keys.<br/><br/>I’d argue the causes were the ad-hoc “Actor Tokens” for impersonation (wrapping in an unsigned JWT: what the heck?), and that AAD Graph still hasn’t been shut down. It’s been deprecated since before I joined MS Identity in 2020, and has been a steady source of vulns 2025-09-18T16:46:54Z