Recent searches

No recent searches

Search options

Only available when logged in.
toad.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Mastodon server operated by David Troy, a tech pioneer and investigative journalist addressing threats to democracy. Thoughtful participation and discussion welcome.

Administered by:

Server stats:

292
active users

toad.social: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.4.3

#Cloud

82 posts72 participants1 post today
Nils Goroll 🕊️:varnishcache:

if you meet someone who does not understand the implications of vendor lock in, just tell them they will when they get blackmailed:

»However, two days ago, Slack reached out to us and said that if we don’t agree to pay an extra $50k this week and $200k a year, they’ll deactivate our Slack workspace and delete all of our message history.«

skyfall.dev/posts/slack

Mahad KalamSlack is extorting us with a $195k/yr bill increaseAn open letter, or something
#vendorlockin#cloud
Karl Voit :emacs: :orgmode:

"While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful #EntraID #vulnerability that I will probably ever find. This vulnerability could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments). If you are an Entra ID admin reading this, yes that means complete access to your tenant." 😲

dirkjanm.io/obtaining-global-a

dirkjanm.io · One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokensWhile preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments). If you are an Entra ID admin reading this, yes that means complete access to your tenant. The vulnerability consisted of two components: undocumented impersonation tokens that Microsoft uses in their backend for service-to-service (S2S) communication, called “Actor tokens”, and a critical vulnerability in the (legacy) Azure AD Graph API that did not properly validate the originating tenant, allowing these tokens to be used for cross-tenant access.
#Microsoft#security#Cloud
Continued thread
Jonathan B ✈️🪄👨🏻‍💻

My wife is taking over the business and so we’d like to make it easier to maintain and self host. I’m thinking Nextcloud might be the way, marking the appropriate folders as available offline? Any better ideas (I’d love to write an app but don’t really have the time!)

#android#selfhosting#selfhosted
Jonathan B ✈️🪄👨🏻‍💻

Any suggestions as to how to sync audio files and playlists from a central server to some android tablets (issued to a couple of teachers) used for toddler and baby music classes? Currently the setup uses OneDrive and an app but is logged in as one user which has been problematic when it gets logged out. VLC is used for playing the tracks. It needs to be useable offline.

#android#selfhosting#selfhosted
TrendingLive feeds
About