krooj

7 ms·

1.
by krooj 3mo ago
Same!
2.
by krooj 3mo ago
Oh wow - seeing my own work in the wild is ... wild. I implemented the RAS end of this for Atlassian. There will certainly be iterations around this flow - CIMD, better tenancy support, etc., but all the folks involved in delivering this at
3.
by krooj 4mo ago
My man, all these fuckers use the same parasitic management consultancies. That's why all this shit looks the same.
4.
by krooj 5mo ago
Interesting - I wonder if this isn't a case of theft on a refresh token that was minted by a non-confidential 3LO flow w/PKCE. That would explain how a leaked refresh token could then be used to obtain access, but does the Vercel
5.
by krooj 8mo ago
Question - from the perspective of the actual silicon, are these NPUs just another form of SIMD? If so, that's laughable sleight of hand and the circuits will be relegated to some mothball footnote in the same manner as AVX512, etc. To
6.
by krooj 1y ago
The comment in lines 163 - 172 make some claims that are outright false and/or highly A/S dependent, to the point where I question the validity of this post entirely. While it's possible that an A/S can be pseudo-generat
7.
by krooj 1y ago
This is one of those cases where I would hope that extremely strong federalism is exercised from Ottawa: essentially, Alberta could be dissolved, stripped of its provincial status and relegated to a territory. From that point, allow for fur
8.
by krooj 2y ago
Yep - I remember the CCAT from 4th grade that resulted in my being placed into a different class for 5th. AFAIK, we were given this test "cold" (no prep) and I remember it being timed.
9.
by krooj 2y ago
> In short, Open ID Connect is quite accurately described as an Authentication standard. But OAuth 2.0 has little to do with Authorization. It allows clients to specify the "scope" parameter, but does not determine how scopes a
10.
by krooj 2y ago
> The industry predominately rewards writing code, not designing software. The sad part of this is that code is absolutely a side-effect of design and conception: without a reason and reasonable approach, code shouldn't exist. I rea
11.
by krooj 2y ago
Linus always has a great way of summarizing what others might be thinking (nebulously). What's being said in the article is really mirrored in the lost art of DDD, and when I say "lost" I mean that most developers I encounter
12.
by krooj 2y ago
Weird - this is the first place I saw the "internet" on display as a kid. Shame to see it close in such an unceremonious way.
13.
by krooj 2y ago
You'd be surprised at how little cloud vendors give a shit about security internally. Story time: I recently went ahead and implemented key rotation for one of our authz services, since it had none, and was reprimanded for "not im
14.
by krooj 2y ago
You really think that's anti-social behaviour? It's a matter of practicality, my delicate flower.
15.
by krooj 2y ago
This is basically how I handle it, and we live in the neighborhood mentioned by this article. The disability claim is largely a straw man argument: I've never seen someone in a wheelchair try to navigate SF streets - they're far,
16.
by krooj 3y ago
I also have the same mutation, as does my wife. From what I've been told by various hematologists, vascular surgeons, and interventional radiologists, it's a very weak clotting disorder, but you do have to keep an eye on certain e
17.
by krooj 3y ago
I'll echo this - I have had two left leg DVTs, spaced about 7 years apart, and after the second event, really started diving into medical publications - surgical journals, medical textbooks, clinical trials - as a means to better under
18.
by krooj 3y ago
They absolutely do not and also introduce a significant amount of overhead with respect to key/certificate management.
19.
by krooj 3y ago
No, there's no explanation.
20.
by krooj 3y ago
Agree - you only need to look at things like the hybrid flows to see where things fall apart: why would you issue an id_token that contains user information to a client which hasn't yet fully authenticated itself via a code-to-token ex
21.
by krooj 3y ago
Yup - OIDC can be boiled down to: 1. The OG OAuth2 spec never said anything about identifying principals 2. OIDC mandated an id_token to avoid the hit of POSTing the access token to an introspection endpoint 3. The shape of the id_token is
22.
by krooj 3y ago
1000x this - each and every CAIM has their own "interpretation" of what the various constructs actually mean in the various RFCs and it leads to a lot of hodge-podge integrations that organizations outgrow. Things like Okta and Au
23.
by krooj 3y ago
I feel as though this is a consequence of organizations not really understanding how complex the space truly is. The way I've watched OAuth2 + OIDC get adopted in various companies was never from a security-first perspective; rather, i
24.
by krooj 3y ago
If you do this and I am the one interviewing you, I will fail you. I will figure out what you actually do/don't know and if you are incapable of performing at the applied level, I will fail you.
25.
by krooj 3y ago
Our family went through the same thing with a budget Celeron "MDG" computer running Windows 98. Awful. Keep in mind that, like you, I had previously used a IIsi and an LC630, so I figured... 300MHz, must be amazing?!? At some poin
26.
by krooj 3y ago
This article is not as impressive as one might imagine - the exploit appears to use the implicit grant flow, which is officially deprecated and should be replaced by the authorization_code + PKCE flow.
27.
by krooj 3y ago
The important thing with PKCE is that it's not completely secure, either. A malicious actor can create an app that uses your client_id and its own code_challenge and verifier. In the event that there are any issues with redirect jackin
28.
by krooj 3y ago
No. This is wrong. Implicit is deprecated in favor of authorization_code + PKCE
29.
by krooj 3y ago
This is what the client_credentials grant flow is intended for. If you're using any interactive grant flows to secure S2S communications, you're doing it wrong.
30.
by krooj 3y ago
Their 3D reconstruction viewer has some neat examples - there's a carbon fiber bicycle saddle where you can absolutely see voids in the layup process and step through the sagittal slices to see the propagation characteristics.

More ›