Hacker News: windowsworkstoo

New comment by windowsworkstoo in "Friendship Begins at Home"

windowsworkstoo — Sun, 19 Oct 2025 07:34:36 +0000

1000% correct. the second you look in the mirror and you're happy with what you see, baby, you just lost the battle.

New comment by windowsworkstoo in "A criminal enterprise run by monkeys"

windowsworkstoo — Sat, 02 Aug 2025 04:08:11 +0000

The amount of ideas Karl had that have since come to fruition is quite remarkable

New comment by windowsworkstoo in "XSLT – Native, zero-config build system for the Web"

windowsworkstoo — Fri, 27 Jun 2025 08:00:29 +0000

Agree, when MS moved their office file formats to xml, I made plenty of money building extremely customizable templating engines all based on a very small amount of XSLT - it worked great given all the structure and metadata available in xml

New comment by windowsworkstoo in "(Reasonably) secure Azure Pipelines on-prem deployments"

windowsworkstoo — Sat, 08 Mar 2025 07:43:43 +0000

Probably the only improvements I can think is running the runner as a gMSA and applying the relevant ACL's to that, so you can avoid needing to supply creds.

Otherwise, on our fleet of hundreds of IIS, we've had success just pointing IIS to a hardlink, deploying the new version to a new folder and updating the hardlink - from memory this does trigger an app pool restart but its super fast, lets you go back and forth very easily.

New comment by windowsworkstoo in "Adobe's new image rotation tool is one of the most impressive AI tools seen"

windowsworkstoo — Thu, 17 Oct 2024 22:18:21 +0000

This is just to make it an IdP initiated flow (instead of a SP initiated flow) and its to prevent the extra hop back and forwards between Okta/IdP and the application.

New comment by windowsworkstoo in "The weirdest bug I've seen yet"

windowsworkstoo — Fri, 01 Dec 2023 10:33:19 +0000

Very well said - even with open source there seems to be a general lack of willingness to actually read code, let alone crack open the disassembler or attach a debugger - the skill is apparently not taught anymore

New comment by windowsworkstoo in "Call the Routing Police"

windowsworkstoo — Fri, 24 Nov 2023 04:01:23 +0000

In AU, even for aerial powerlines, we run our own mix of fibre and radio comms between zone subs and stuff like ACR's... in fact I dont think any of the transmission or distribution operators utilise any telco stuff for their control networks

New comment by windowsworkstoo in "1Password detects "suspicious activity" in its internal Okta account"

windowsworkstoo — Tue, 24 Oct 2023 01:48:35 +0000

Yah, this is why third party risk management is a thing. When I ran sec training, I always hammered home the point that a third party security issue is your issue.

Now, sure, technically there may be circumstances when you can technically/legally shift liability. But your customers don't care - they have the relationship with you. So the third parties problems, are your problems.

New comment by windowsworkstoo in "Structuring Your Infrastructure as Code"

windowsworkstoo — Sat, 19 Aug 2023 21:56:37 +0000

Global namespace shared resources, regional namespace shared resources, then each app provisions its own bit, consuming/linking the two aforementioned layers.

Everyone gets here eventually and you can just fight over stuff like “is an alb shared regional or app specific”

New comment by windowsworkstoo in "The future of the web is VNC"

windowsworkstoo — Mon, 31 Jul 2023 13:08:32 +0000

No, this is the new trend, browser isolation - see Island Browser for example

New comment by windowsworkstoo in "The man who broke bowling"

windowsworkstoo — Fri, 30 Jun 2023 11:47:39 +0000

bowling is fucken weird..I was a junior almost pro bowler and I know Belmo, being around the same age, coming up at the same time and in the same area as him…he’s a freak in the best sense of the word. I remember some other kids who would bowl with a bigger hook (and their thumbs) but Belmo was just super consistent…knew he would do great and very glad he has, despite all the haters

New comment by windowsworkstoo in "Kenny Log-Ins"

windowsworkstoo — Thu, 25 May 2023 02:58:46 +0000

The amount of ideas that Karl had which came to reality, that Steve and Ricky dismissed as mental is what keeps me listening to Youtube compilations of their show to this very day :D

New comment by windowsworkstoo in "CDC File Transfer"

windowsworkstoo — Sun, 08 Jan 2023 22:52:38 +0000

Microsoft have this for DFS-R and the spec is open https://learn.microsoft.com/en-us/openspecs/windows_protocol... - its pretty straight forward to implement.

New comment by windowsworkstoo in "American Airlines is trying to stop a popular app used by flight attendants"

windowsworkstoo — Mon, 17 Oct 2022 19:58:24 +0000

There are API’s, just not public ones - only available under commercial agreement

New comment by windowsworkstoo in "Toyota suffered a data breach by accidentally exposing a secret key on GitHub"

windowsworkstoo — Fri, 14 Oct 2022 00:11:22 +0000

Yah, that's the OAuth Client Credentials flow but as noted, you still have a static set of creds that are required to generate the short lived access token. Besides being useful for being able to limit scope in some circumstances, the main point of the client cred flow is to appease eager sec arch's who insist on OAuth.

New comment by windowsworkstoo in "Okta Exposes Passwords in Clear Text for Possible Theft"

windowsworkstoo — Sun, 25 Sep 2022 05:45:09 +0000

To answer the why plain text, the feature this talks about is the Okta Secure Web App - basically if an app cant do proper SSO you can set it up as SWA which just acts like a password manager. The Okta browser plugin will just fill out the login form of whatever site for you. One bonus feature with SWAs is the admin can set a password for all users, making it a cheap way to share an account transparently for all your users.

In the words of Raymond Chen this exploit is basically being on the other side of the air tight hatch

New comment by windowsworkstoo in "How to Bypass Cloudflare: A Comprehensive Guide"

windowsworkstoo — Mon, 19 Sep 2022 02:02:55 +0000

Yes, Google and most major search engines enable a RDNS lookup to validate they are really a googlebot

New comment by windowsworkstoo in "Ask HN: What are the ways you go about getting comfortable with a new codebase?"

windowsworkstoo — Sat, 06 Aug 2022 07:42:16 +0000

Yep, underrated advice. Run it, read the code, fiddle some bits and make sure what you fiddled matches your mental model.

Honestly, learning to read code and execute it in your head is a super power

New comment by windowsworkstoo in "After the first tech job"

windowsworkstoo — Thu, 05 May 2022 06:52:07 +0000

Heh your bit about Github resonates. I hire plenty of devs and the whole "make sure you have a GH body of work" has become such a meme that when people do include it on their CV, it's usually just a big list of forked repos with no contributions.

For me, Github/personal projects have not been a useful signal either way, but it is apparent in recentish years that the advice has been to have one regardless.

New comment by windowsworkstoo in "It’s Still Stupidly, Difficult to Buy a ‘Dumb’ TV"

windowsworkstoo — Fri, 15 Apr 2022 09:02:12 +0000

Don’t know your exact specs or the premium you pay over consumer level but I buy/install commercial display panels and when I need a new TV or such, I just grab one of them. No extra stuff, fast input switching etc etc