https://nostr.ae https://nostr.ae/npub1e52qzm4uzjry900xvkka3wxh07l7kgl6vecgka7q363ut5356vls9532ah https://nostr.ae/nevent1qqspx0m9pkglhjfvs4qdwejayvg4ssqpffsevzq2n0zpcw72qqp9djgzyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn7mcjm64 In reply to <a href='/nevent1qqsthr0z7suzvau6832pvjuh8hky54ts0dyxpdc5st8mnuugnf08f6slh4zz2'>nevent1q…4zz2</a><br/>_________________________<br/><br/>thank you for the breakdown. I am trying really hard to fix my American biases, and I’m grateful for the reassurance this isn’t one of those times I’m biased. The signs are legit confusing ! 2026-08-14T11:37:07Z https://nostr.ae/nevent1qqs0tfhy0u4hjl5fg8v2tu6cmtnjavjvg42rs7j93pu0gvfqw5dp8pgzyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn7g4pvl9 In reply to <a href='/nevent1qqszphmte9ff8xyk264kwugg0ye4le7uaccgd4kpdarq332maf5ncsssfpwmh'>nevent1q…pwmh</a><br/>_________________________<br/><br/>preferred currency? 2026-08-10T09:52:56Z https://nostr.ae/nevent1qqsyr5xxwlgaax95rrjswcrhp6jwkka6etuqlav993c7khkc3dpzvuqzyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn7qr6ayx In reply to <a href='/nevent1qqs904ds8qqx2r57uplqytrrz8l9pnd5vx7mt8nuwf2l49uf6dnwc5qvys28r'>nevent1q…s28r</a><br/>_________________________<br/><br/>The big red eye looks like it’s in a broken summoning circle. This is beautiful. 2026-08-04T12:20:52Z https://nostr.ae/nevent1qqs8rxpfqcp06w5u77tsm6jwuj7p6aqu0ypqu89d70czrapg0tk3mwqzyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn774enfc In reply to <a href='/nevent1qqsra3e0hrxn3t0mdr9aaczvz58c8uvdwzewlm6gnw68860e8uzd3xce9mkkc'>nevent1q…mkkc</a><br/>_________________________<br/><br/>oh I see <a href="https://www.itu.int/rec/dologin_pub.asp?lang=e&amp;id=T-REC-X.680-202102-I!!PDF-E&amp;type=items">https://www.itu.int/rec/dologin_pub.asp?lang=e&amp;id=T-REC-X.680-202102-I!!PDF-E&amp;type=items</a><br/><br/>In the data structures themselves. Yea I would be very interested in an example of it being Turing complete 2026-07-07T21:15:14Z https://nostr.ae/nevent1qqs00qtpa7cjas8d04dx0w4wz7uu9pfax696ydd4tklmszlu6vwn7hszyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn7shz5lw In reply to <a href='/nevent1qqs88v48jscu7dk5qmals8d73cvlasamacray9sl2sgujg0rqh5fq5grzwws6'>nevent1q…wws6</a><br/>_________________________<br/><br/>maximum gayness in all things.<br/><br/>I don’t think it is. There’s no branching or flow control that I know of. Maybe there’s some trick in the module import feature that gets you to recursion accidentally. I’m very much not a theorist, though.<br/><br/>What’s the Yes argument? 2026-07-07T20:29:06Z https://nostr.ae/nevent1qqsykt9u7kxxrqhtj597skf2nv40x3kk8z6g73qpc9h5dg35hq5w57qzyrx3gqtwhs2gvs4auej6mk9c6alml6erlfn8pzmhcz8283wjxnfn7thd0nf In reply to <a href='/nevent1qqstsvfkv03n2gze9vykfsd2uzqrsswal7rzn6kdzfchssxv3kzlxssgj74l8'>nevent1q…74l8</a><br/>_________________________<br/><br/>where are you seeing reference to symmetric keys? <br/><br/>In the Technical Details section on Actor Tokens, it says “These hybrid setups used to provision a certificate credential on the Exchange Online Service Principal (SP) in the tenant, with which it can perform authentication.” . Adversary would then use the (x509) cert (and private key) to authN to eSTS (the Entra IdP), get one of these wacky “Actor Tokens” that AAD Graph doesn’t validate properly. <br/><br/>eSTS does support both x509 and client secrets for an SP to authN, but client secrets are just CSPRNG-generated passwords. They’re bearer tokens, not symmetric AES or RC4 keys.<br/><br/>I’d argue the causes were the ad-hoc “Actor Tokens” for impersonation (wrapping in an unsigned JWT: what the heck?), and that AAD Graph still hasn’t been shut down. It’s been deprecated since before I joined MS Identity in 2020, and has been a steady source of vulns 2025-09-18T16:46:54Z