<unnamed>

Public Key

npub1e52qzm4uzjry900xvkka3wxh07l7kgl6vecgka7q363ut5356vls9532ah

Profile Code

nprofile1qqsv69qpd67pfpjzhhnxttwchrthl0lty0axvuytwlqgag796g6dx0cpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds2ct953

Publishing to

nostr.wine

relay.damus.io

nos.lol

Last Notes

2026-08-14 11:37:07 UTC

- reply

thank you for the breakdown. I am trying really hard to fix my American biases, and I’m grateful for the reassurance this isn’t one of those times I’m biased. The signs are legit confusing !

2026-08-10 09:52:56 UTC

- reply

preferred currency?

2026-08-04 12:20:52 UTC

- reply

The big red eye looks like it’s in a broken summoning circle. This is beautiful.

2026-07-07 21:15:14 UTC

- reply

oh I see https://www.itu.int/rec/dologin_pub.asp?lang=e&id=T-REC-X.680-202102-I!!PDF-E&type=items
In the data structures themselves. Yea I would be very interested in an example of it being Turing complete

2026-07-07 20:29:06 UTC

- reply

maximum gayness in all things.
I don’t think it is. There’s no branching or flow control that I know of. Maybe there’s some trick in the module import feature that gets you to recursion accidentally. I’m very much not a theorist, though.
What’s the Yes argument?

2025-09-18 16:46:54 UTC

- reply

where are you seeing reference to symmetric keys?
In the Technical Details section on Actor Tokens, it says “These hybrid setups used to provision a certificate credential on the Exchange Online Service Principal (SP) in the tenant, with which it can perform authentication.” . Adversary would then use the (x509) cert (and private key) to authN to eSTS (the Entra IdP), get one of these wacky “Actor Tokens” that AAD Graph doesn’t validate properly.
eSTS does support both x509 and client secrets for an SP to authN, but client secrets are just CSPRNG-generated passwords. They’re bearer tokens, not symmetric AES or RC4 keys.
I’d argue the causes were the ad-hoc “Actor Tokens” for impersonation (wrapping in an unsigned JWT: what the heck?), and that AAD Graph still hasn’t been shut down. It’s been deprecated since before I joined MS Identity in 2020, and has been a steady source of vulns