Aaron Parecki

Yet another reason why Token Exchange is dangerous 🤯😱

"Bing is allowed to issue Office tokens for any logged-on user"

https://twitter.com/hillai/status/1641146523990753290

Remember how I always say make sure you audit your third-party JavaScript you embed in your apps, especially in your login pages? Classic example right here, someone inserted malware into the @Twilio SDK because it was in a publicly writable S3 bucket. 😱 https://www.twilio.com/blog/incident-report-taskrouter-js-sdk-july-2020

😱 Came home from a trip to a failed hard drive on one of my home servers. Time to put my backup system to the test!

💾 New drive is on its way, warranty return for the old drive is started.

☁️ Once the new drive arrives, I'll attempt to restore it from my local backup. With any luck, that'll work. Otherwise I'll have to get a drive mailed to me from Backblaze.

🚀 Here we go!

oh no I typed an extra zero getting Czech koruna out at the ATM and now I have to spend $400 USD in three days because this currency is useless anywhere else 😱

Windows 95 implemented in JavaScript: https://github.com/felixrieseberg/windows95 😱🤯

I think the scariest thing about this project is how not old Windows 95 feels.

Like I can still smell the shrink wrap on my Windows 95 floppies.

Somehow we didn't manage to encounter Käsespätzle at any of the places we ate at this trip! Doubt we'll find any in Berlin either! 😱

omg. I remember when these were going around physical mail, like "mail $5 in an envelope," I can't believe it's "send $150 on Venmo" now 😱💸◬ https://medium.com/@juliaonken/the-gen-z-pyramid-scheme-sweeping-instagram-e6d53e0e2b46

😱😱 my computer crashed and Chrome didn't restore all my tabs and now I'm having a minor panic attack how will I remember what i was doing