Links
AddSMBC is a daily comic strip about life, philosophy, science, mathematics, and dirty jokes.
SMBC is a daily comic strip about life, philosophy, science, mathematics, and dirty jokes.
Today, Last.fm begins a new chapter as an independent company. Ownership has changed, but the product you use every day has not. Your account, your listening history, and your data remain exactly where they are. The te…
A completely private and local AI coding assistant, developed by Gensyn. It helps you practice programming problems and train a novel assistant to help you code. - gensyn-ai/codeassist
The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™ - authelia/authelia
SMBC is a daily comic strip about life, philosophy, science, mathematics, and dirty jokes.
SpaceX's Polaris Dawn mission conducted the first-ever private spacewalk on Sept. 12, 2024. Full Story: https://www.space.com/spacex-polaris-dawn-first-priva...
Time seems simple. But we engineers lose sleep over something as basic as keeping clocks in sync. Here’s why…
SMBC is a daily comic strip about life, philosophy, science, mathematics, and dirty jokes.
While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments). If you are an Entra ID admin reading this, yes that means complete access to your tenant. The vulnerability consisted of two components: undocumented impersonation tokens that Microsoft uses in their backend for service-to-service (S2S) communication, called “Actor tokens”, and a critical vulnerability in the (legacy) Azure AD Graph API that did not properly validate the originating tenant, allowing these tokens to be used for cross-tenant access.
As a security best practice, AWS Identity and Access Management (IAM) recommends that you use temporary security credentials from AWS Security Token Service (STS) when you access your AWS resources. Temporary credentials are short-term credentials generated dynamically and provided to the user upon request. Today, one of the most widely used mechanisms for requesting temporary […]
Use roles to grant an IAM user access through identity federation (authorization by an external service).
Select, put and delete data from JSON, TOML, YAML, XML and CSV files with a single tool. Supports conversion between formats and can be used as a Go package. - TomWright/dasel
Wazuh is a free and open source security platform that unifies XDR and SIEM protection for endpoints and cloud workloads.
The federally funded organization behind the Common Vulnerabilities and Exposures (CVE) program confirmed that its contract to support the system will expire on April 16th.
Pandoc templates for PDF, LaTeX, HTML and Word. Easily convert documents with customizable templates for reports, articles, and more.
SMBC is a daily comic strip about life, philosophy, science, mathematics, and dirty jokes.