Firstyear

Senior LDAP/IDM Tech Debt Collector
@SUSE. Supermarket Thought Leader. Author of Kanidm, concread and webauthn-rs. he/him

Last Notes

2026-08-13 15:19:10 UTC

- reply

Ransomware may hurt a lot of people, but it also increases shareholder value so its hard to say if its bad or not.

2026-07-27 07:09:56 UTC

- reply

At country scale 6% is *A LOT* of users who missed this alert.

2026-06-03 03:54:22 UTC

RE: https://live.acarsdrama.com/@acarsdrama/116683531117865946
Its not commonly known but all 737s have a standard issue furry on board that can be unleashed midflight to resolve technical issues.
#note1h4l…yuxf

2025-12-17 03:22:06 UTC

I have been avoiding this for a long time, but once again I have written about the state of passkeys - https://fy.blackhats.net.au/blog/2025-12-17-yep-passkeys-still-have-problems/

2025-03-15 23:33:16 UTC

AI coding tools are just tech debt loan sharks

2024-11-01 02:29:08 UTC

We just released Kanidm 1.4.0 - The web facing side of things has been rewritten and is much faster and lighter. Our pam modules are able to replace pam_unix for local linux auth and fallback. We did a huge tech debt (house keeping) pay down. Support for custom images on some key user interfaces. And heaps more. So many thanks to everyone that contributed to this version.
https://github.com/kanidm/kanidm/releases/tag/v1.4.0

2024-09-23 12:03:26 UTC

- reply

The redflag was that their reason would not have been out of place as a linkedin desc. If they put "im here to shitpost and learn" thats how you know theyre real.

2024-09-03 20:50:43 UTC

- reply

The actual risk here is for orgs performing webauthn attestation since an attacker can now recover a yubikey attestation private key, and if they get access to an account can enroll a "fradulent yubikey" to it.
And even then thats a lot of work when you .... already have access to the account.
So as technically cool as this attack is, I doubt it will be exploited in the wild.

2024-08-27 21:16:27 UTC

- reply

I dont even think you can return a confidence level as lower levels can lie or mask info. Disks with transparent write caches, filesystems mounted with nosync, or even in a vm where the underlying host storage is an unknown.