⊥ᵒᵚ⁄Cᵸᵎᶺᵋᶫ∸ᵒᵘ ☑️ @falken@qoto.org

Good lord: https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/

While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. This vulnerability could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments1). If you are an Entra ID admin reading this, yes that means complete access to your tenant.

“We’re constantly told, you know, we need to see peaceful protests. Well, here’s a peaceful protest … We projected a piece of journalism on to a wall and now people have been arrested for malicious communications. I think that, frankly, says a lot more about the policing of Trump’s visit than it does about what we did.”

https://www.theguardian.com/us-news/2025/sep/17/four-arrested-after-image-of-trump-and-epstein-projected-onto-windsor-castle-ahead-of-presidents-visit

#DonaldTrump #JeffreyEpstein #PrinceAndrew #Windsor

Private Eye knocking it out of the park yet again! 😂

Never let corporate software on your personal device. Exhibit 763738
https://oldbytes.space/@feoh/115215401541166467

🤯 Instagram is testing new iOS push notifications that include a profile photo. Each time the notification is shown on your screen, it triggers a GET request to fetch that image, letting Meta track every on-screen impression.

The app still misuses push notifications to send detailed device analytics about the device (uptime, battery, volume, locale, timezone, memory, CPU, etc.)

#privacy #infosec #privacymatters #Apple #iOS #meta
More 👇🧵

Can anyone recommend an open-source (Windows) alternative to Microsoft OneNote? I've looked at a few, but can't find the functionality I need: the ability to freely drag text/objects on a 'whiteboard/canvas' type page; a similar interface/layout to OneNote; being able to save files locally (not cloud-only).

Does anyone I know have access to a 9-track data tape transport?
Ideally one set up to work with Readtape?
A friend has some 9-track tapes which are historically interesting and we'd like to try and recover them.
They have been hit by mould/mildew but we think they could be cleaned.
#digipres

Assigned Male Comics by Sophie LaBelle hits the bullsye again:

WELCOME TO WINDSOR CASTLE, DONALD TRUMP 🏰🇬🇧

The British public greeted him with a gigantic banner right outside the castle where he’s staying with the King this week—funded by 1,770 people.

This trip is all about polishing Trump’s image 🪞✨ so please, absolutely do NOT share the world’s largest photo of him with Jeffrey Epstein 🚫📸

Thank you for respecting the President’s delicate PR moment 🙏😂

Antiques Expert: Well this is a very nice necklace you have here - these are real diamonds and sapphires, well made. I think it will attract a lot of interest. Can I ask how you came to have it?

Participant:Oh well, it was from my dad, and he worked really hard and he had to work away from home a lot - sometimes for months or years - and every time before he went away, he would give me and my mum something, and he said to me "Not for wearing - keep it safe to remember me by" and I did, and this was the last thing and I think he did work for the police because they always seemed to come round .....

before

he

went

away.

Oh.

I'll send an ASIC hat to the first person who guesses what this is!

#ASIC #opensource #silicon

Do you understand the security needs for VPNs used for the purpose of protecting the privacy of the person using them? We could use your help writing the CRA standard for VPNs.

If €450/day would make it possible for you to participate in this or any other CRA standardization work, the call for funding applications is open until September 19:

https://cyberstand.eu/8th-specific-service-procedure

Work funded by EFTA and EC #CRA

@waldo.net

Nuclear waste disposal not withstanding, the reason I think it makes no sense to build nuclear power plants is that wind & solar with batteries can be deployed at scale in a fraction of the time at lower cost (that's still decreasing) with far lower maintenance costs.

There's no reason to tie up capital for years on end when that same capital can build 15 times more solar & wind generation far faster.

Bill McKibben talks about this & more in this podcast - https://www.volts.wtf/p/what-does-clean-energy-activism-look

If you don't have a subscription to the Wall Street Journal, you can read a free version of this essay here:

https://archive.is/ADjdy

This quagmire is getting bigger. It's another part of what William Gibson recently called the Singularity of Stupid.

"Hosting a WebSite on a Disposable Vape"

https://bogdanthegeek.github.io/blog/projects/vapeserver/

Truly, we live in an age of absurdly wasteful wonders.

(Although the vapes aren't running Android. Yet.)

"Legibility isn't that bad in the latest betas, Niléane."
"Why do you keep catastrophising the state of Liquid Glass, Niléane"
"You're always staging your screenshots Niléane, in day-to-day use it's not that bad"

Meanwhile, this is the state of Safari in the *Release Candidate* of iOS 26 that Apple is releasing worldwide tomorrow:

Here is a repost showing the shortest walking route on the British mainland as an orange line from census locations to the nearest heavy rail station. This uses #OpenStreetMap road and street data, #ONS and #LibraryOfScotland census population areas (Output Areas OA/Data Zone DZ) and was developed in #Python. The stations are show on the left-hand side as an orange diamond with a black boundary.

@moshboy That game's playlist fucking slaps. AND, it was made to play in a normal CD player.

Fatboy Slim's "Love Island" is my favorite track

My Epson HX-20 is now back in one piece, and - look - no wires! It's running off internal capacitors (more in a moment...). I'd replaced most of the caps on the board - which got the LCD useable, and allowed it to run off less than 5v input at the battery terminals.
#retrocomputing

🧵 1/n

Just finished watching the 1980 version of 'Flash Gordon' for the first time since... the 1980s...

... and it was glorious. I'd honestly forgotten how wonderfully bonkers it all is - my memory of it had been reduced to a few choice quotes preserved in the titular Queen song.

The scenery-chewing Brian Blessed as Prince Voltan was right all along: Gordon is indeed alive. 😉