Frank Lesniak

29 Aug

Want #Intune "as code" without the nightmare of JSON import/export pipelines? @danny-stutz.bsky.social & I are showing a better way at Workplace Ninjas US. We'll use DSC v3 to enforce #Win11 baselines & fix drift in real time Jan 11-13 | Scottsdale, AZ workplaceninjas.us #WPNinjasUS #WPNinjas

21h

I just submitted my first MSRC case today 👀 I set the disclosure date for April - fingers crossed Microsoft agrees, and I can share more details then! #vulnerability #vulnerabilities #CVE

22h

Google Docs allows WYSIWYG editing of Markdown documents. I just did this by dragging and dropping a .md file into Google Drive; then I opened it, and it opened in Google Docs, editable. Has anyone reverse-engineered Microsoft Word to add this feature?

Umm, what the hell, #Windows?! I already nuked my search index once today because of this and it's still happening!

Lenovo needs a ThinkPad laptop with a current-generation ARM processor, 64 GB or more of RAM available as an option, and a 14" screen (or smaller). RTX Spark would be nice, but I'd also appreciate an X2 Elite.

Over the weekend, I found a security #vulnerability in a widely used #PowerShell module. I can't share the details yet, but join me at PDQ LIVE tomorrow, Thursday, Oct 22, at 11 AM CDT, where I'll talk about how I found it and what responsible disclosure looks like. Link in the comments below.

youtube.com🔴 Nmap Explained, a PowerShell Security Mystery, and PDQ & A - YouTubeEver get the feeling there's something going on behind your back? Well, if you're a sysadmin, there's a pretty good chance there is. And it's probably happen...

Link: www.youtube.com/live... If you're building open-source tools/software, I'll also share a few tips on setting things up so people like me can more easily disclose security findings to you.

I feel like such an adult after getting eight resolutions passed at a board meeting tonight 😅

Update: I've gotten in touch with Doug and disclosed the vulnerability. We're chatting about a fix.

Frank Lesniak@franklesniak.com

If anyone in my circle is connected with Doug Finke, I have a somewhat urgent security vulnerability to report to him regarding ImportExcel. He has me blocked on all social media and on GitHub, so I don't know how to contact him privately to disclose it. Any (constructive) advice is appreciated.

I didn't wake up this morning thinking I'd submit my first vulnerability disclosure to CISA, but sometimes life comes at you fast. 😅

I recommend that he unblock me on GitHub and enable private vulnerability reporting so I can disclose properly. He could do this in his repo's settings > Code security > Private vulnerability reporting. I'm open to other suggestions, too.

theverge.comSprout Pi adds Bluetooth, streaming, and USB-C to your aging iPodThis replacement iPod motherboard adds modern amenities, but streaming might be missing the point.

Pretty damn cool: Sprout Pi adds Bluetooth, streaming, and USB-C to your aging iPod

I don't talk about this enough.

The "non-slow" CI tests have been running for 1 hour and 46 minutes, and they are only 67% complete. Cripes! How long will the "slow" tests take?!

4001 comments, 580 files changed, and 318K lines added--officially my new record. I wish I could share the link, but it's in a private repo. It's an adoption of my coding agent accelerator template repo (github.com/franklesn...) into an existing repository. #GitHub #CodingAgents #Codex #ClaudeCode

I should have listened to @przemyslaw.evotec.xyz and set up self-hosted #GitHub runners 😬

Frank Lesniak reposted

PSConfEU

@psconf.eu

💥 BOOM. Speakers announced. Tickets are free. What are you waiting for? 🎟️ Check the schedule and book your free ticket : synedgy.com/psconfeu-minicon/ #PSConfEU #PowerShell #automation #conference #free #IT

github.comGitHub - franklesniak/EFingPlanner: A self-guided, printable Markdown curriculum that builds executive-function (EF) skills by guiding a child (about ages 9–11) through planning a real family trip to Japan—accessible by default for kids who find planning hard (ADHD, anxiety, dyslexia). Part EF resource, part real trip-planning binder, for US-based, English-reading families.A self-guided, printable Markdown curriculum that builds executive-function (EF) skills by guiding a child (about ages 9–11) through planning a real family trip to Japan—accessible by default for k...

EFingPlanner is now public: a free, printable curriculum for kids around 9 to 11. In short sessions, the child plans a family trip and practices breaking a big job into small steps. Adults check the facts and do the booking.

Hmm. #Codex is down for me. Suddenly my Codex app's chat windows cannot connect to the back-end API.

Frank Lesniak reposted

For my Chicagoland-based folks: DuPage Animal Friends has a fundraiser coming up at @noonwhistlebrewing.bsky.social in Lombard, IL, on October 2. This event is a ton of fun! I'll be there from 5-9 PM with the fam. Stop by, grab a drink, and support #ShelterPets! Tickets: dupageanimalfriends....

Jeez, the NeoGeo AES+ is delayed until Sept 2027?!

Thanks to Opus 5.5, Claude doesn't seem totally worthless! Only half joking - I was about to cancel my sub after being maxed out on frustration dealing with Opus 5. (Before the Claude haters or Codex lovers chime in, I use the crap out of Codex as well)

Hmm. The last two days, my #Codex #VSCode extension works for a while. But, then -- seemingly randomly -- it refuses to display anything other than a grey box.

17 Sept

Spent the last couple of days facilitating @westmonroe.bsky.social's Basecamp, training ~75 new college hires. Great experience—super fun seeing folks across tech, industry, and functional teams use Codex in a mini-hackathon. They built amazing stuff in just hours! #AI #Hackathon

8 Sept

Umm... this is an ARM64 system, and I'm running Windows 11?

7 Sept

I'm here! #hipconf #hipconf26

30 Aug

I'm Nashville-bound next week for the Hybrid Identity Protection Conference! I selected sessions on defending AD, retiring NTLM & securing Entra (@dotdot.horse, @ericonidentity.com, @merill.net, @samerde.day3bits.com) to help me keep my clients secure. Attending? Say hi! #HIPConf

sessionize.comPowerShell Summit 2027: Call for PapersThe PowerShell Summit is where the PowerShell community comes to learn, connect, and level up. Happening April 5–8, 2027, in Orlando, Florida, the Sum...

28 Aug

The Call for Papers for PowerShell Summit 2027 is open on Sessionize, and I've just submitted a session! (OK, I submitted ten sessions...) What are you waiting for? Submit!: sessionize.com/pshsu... #PSHSummit #PSHSummit27

17 Aug

I am not a fan of this Claude Code UI. I get that it's editing a sensitive file, but not telling me what edit is being made/proposed makes this dialog meaningless. Also, right before this, I explicitly told Claude Code to make this edit, so the redundant pause is incredibly frustrating.

17 Aug

I'm trying something new: Codex is bossing Claude around. Also known as: the fox watching the henhouse. 😅

17 Aug

Codex taught me a new word: mojibake en.wikipedia.org/wik... (Another example where I knew the concept, but not the word for the concept - so: thanks, AI! 😅)

15 Aug

I’ll be heading to Nashville September 8–10 for the Hybrid Identity Protection Conference (#HIPConf26). The agenda and speaker lineup look excellent, and I’m especially looking forward to learning, exchanging ideas, and connecting with others in the #identity community. Who else will be there?

14 Aug

Voting opens tomorrow! Cast your votes for your favorite pets to be featured in the DuPage Animal Friends' 2027 calendar! 2 ways to vote: Purchase votes directly on the specific entry page Bank your votes and check out once Learn more: www.gogophotocontest...

notebookcheck.netA mini-PC like a retro console: Currently on sale for $639 – Acemagic Retro X3 reviewThe Acemagic Retro X3 combines iconic retro design with an AMD Ryzen 7 255 and Radeon 780M. In this review, we test the performance, cooling, noise level, efficiency, and upgradeability of this unusual mini-PC.

11 Aug

Interesting little mini PC: A mini-PC Like a retro console: Currently on sale for $639 – Acemagic Retro X3 review

5 Aug

Why does AI feel the need to point out that every problem is a "real" problem? Saying something is "real" seems to be the leading AI trope of July/August 2026.

Example

Something fun for the DuPage Animal Friends calendar: a photo contest! Submit your best furry friend pics for a chance to feature your pet in the 2027 calendar. Donate $25 and upload here: www.gogophotocontest.com/daf2027. Share and help homeless animals! #dupagesaves #dupageanimalfriends

5 Aug

I'm familiar with this class of race condition/bug, but didn't know the TOCTOU term/acronym until now. 🧠

31 July

I'm honored (and seriously jazzed) to have been able to fly to Dallas this week to teach about 30 of my colleagues what I know about using AI for consulting client delivery! I genuinely love sharing knowledge and empowering others. The fact that I'm paid to do this (on occasion) is amazing.

31 July

About 70% of the room were not Tech consultants, but by the end of the class, we were all using #Codex and doing spec-driven development to build a technical solution to all of consulting-life's problems 😅 But seriously, folks in the class built some really neat things! ✌🏻

You know me: just casually making $202B USD payments to my electrical utility! #ComEd

mimachniak.github.ioDSC v3 Resources List

Super helpful for anyone interested in using or checking out DSCv3!

Michał Machniak (MCT/MVP)@mmachniak.bsky.social

🚀 Finding PowerShell DSCv3 resources just got easier! I’ve put together a centralized, community-curated index of resources 🌐 Web: mimachniak.github.io/dscv3-resour... 💻 GitHub: github.com/mimachniak/d... #PowerShell #DevOps #Automation #IaC #DSC #DSCv3 #MVPbuzz #Microsoft

What the hell, #Notepad?!

powershellgallery.comO365EndpointFunctions 1.2.1Retrieves the Microsoft 365 / Office 365 IP address and URL endpoints from the Microsoft web service and exports them as a proxy PAC file or a Ghostery policy, or merges them with custom endpoints.

Couldn't turn this off fast enough. Actually that's a lie; I tried to turn this off previously but I don't think it was an available notification category.

Frank Lesniak reposted

Hagen 💎

@samuraika.bsky.social

24 July

I built #O365EndpointFunctions to turn the #Microsoft365 endpoint API into a clean, strongly-typed objects and help automate firewall rules, proxy bypass lists, PAC files, and more. www.powershellgallery.com/packages/O36... #PowerShell #Office365 #NetworkSecurity #OpenSource #PSGallery

20 July

Ruby-throated hummingbird perched on electrical lines near sunset on a hazy, low air quality day