Simone

Simone

@simoneb.bsky.social

Recovering infra nerd, now Staff PM at Buildkite. Microsoft Stack, Terraform, DevOps & CI/CD. Lover of dank memes. I make a lot of typos. 🌈🤓🏍️🦘

2.2K followers1.2K following1.2K posts

Simone reposted

dax
@thdxr.com

what is the best github alternative today for private repos

Simone
@simoneb.bsky.social
Entire@goentire.bsky.social

Your agent can write the code. Can your workflow keep up? The Git forge for agent-human collaboration is live now. We’ve built Entire using Entire. Now it’s your turn. Welcome to the rebellion.

Simone reposted

InfoSec
@infosec.skyfleet.blue

Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions

cybersecuritynews.comMicrosoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero PermissionsMicrosoft patched high-severity flaw CVE-2026-80097 (CVSS 8.6) in Authenticator for Android, allowing malicious apps with no declared permissions to steal work account access tokens due to improper authentication in its broker component. Microsoft classified the flaw as a local elevation-of-privilege vulnerability. The issue affected Android devices with Microsoft Authenticator installed and a signed-in work account. Enclave researchers found that an untrusted app could pretend to be a trusted Microsoft application, such as Microsoft Teams, and ask Authenticator to issue delegated tokens for that identity. The request did not need user approval, account credentials, or Android permissions beyond being installed on the device. At the center of the bug was an exported Android activity named com.microsoft.identity.client.AccountChooserActivity. Other apps can start exported activities on the same device. In this case, the activity accepted a broker request from the calling app. It returned the authentication result after processing it. The key problem was how Authenticator verified the requesting application. The broker request included the claimed app package name, client ID, redirect URI, requested scopes, and even a caller UID value. Microsoft Authenticator Flaw Enclave researchers reported that the malicious application could supply these fields rather than having them tied to the app that actually launched the request. Authenticator did perform a signature-related redirect URI validation. However, the check focused on the app identity claimed in the request. If the attacker claimed to be Teams, the vulnerable logic checked whether the redirect URI matched the real installed Teams package. Because Teams was legitimately installed, the attacker could build a valid redirect URI from its public package signature and pass the check. In short, the app verified whether the claimed identity looked valid, but did not confirm that the real caller was the app it claimed to be. The vulnerable activity could identify the package that launched it, according to the research. However, it did not use that information to control trust. Successful requests returned token data through the activity result bundle. The tokens could include access tokens, refresh tokens, ID tokens, and client information. Depending on the impersonated Microsoft client and requested permissions, the impact could extend to Microsoft Graph resources such as mailboxes, calendars, OneDrive files, SharePoint content, and Teams-related services. The researchers demonstrated the risk by impersonating multiple Microsoft apps. A Teams identity requesting Microsoft Graph access could receive delegated permissions that let it read and write mail, send messages, access files, and modify calendars. This flaw is especially important for organizations that use Android devices to access Microsoft 365 workloads. Microsoft fixed the issue in Microsoft Authenticator for Android version 6.2606.4246, which was released in July 2026. Organizations and individual users should update the app through Google Play as soon as possible and verify that managed devices are running a current release. Microsoft’s advisory describes the issue as improper authentication that could let an unauthorized local attacker elevate privileges. The flaw also highlights why mobile identity brokers must validate the real calling application, including its package identity, UID, and signing certificate, rather than relying on app-controlled values in an intent. The incident highlights Microsoft’s ongoing efforts to protect Entra credentials on rooted Android and jailbroken iOS devices , where malware and weakened security controls increase enterprise identity risks. Organizations should review mobile application controls, enforce timely app updates through MDM or EMM platforms, and restrict sideloaded applications where possible. Security teams should also monitor unusual Microsoft Graph activity, unexpected consent behavior, and token use from unfamiliar Android devices. Microsoft’s official CVE-2026-80097 advisory should be used for ongoing remediation guidance. Update defenses against new malware as soon as it appears. Integrate TI Feeds with data from 16K SOCs . The post Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions appeared first on Cyber Security News .

Simone reposted

Bluesky
@bsky.app

v1.136 is live! Introducing: Profile links We want independent writers, artists, developers, and creators to be able to build and fund sustainable projects on Bluesky. Help your followers know how to support you by adding buttons for Patreon, Ko-fi, your newsletter or website, and more.

Simone reposted

Astra ⎔
@astrra.space

oh my fucking god it just keeps going www.phoronix.com/news/LKML-Ne...

phoronix.comSeveral Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing ListSeemingly as an accident, overnight several new Linux kernel vulnerability reports were posted to the public Linux kernel mailing list rather than the private security mailing list
Astra ⎔@astrra.space

merry christmas! github.com/php/php-src/... github.com/php/php-src/...

github.comRCE via OOM corruption## Summary PHP uses `longjmp()` for out-of-memory (OOM) errors to exit the current context and abort handling of the request. In some contexts, request memory is temporarily reachable before it ...

Simone reposted

Ben Collins
@bencollins.bsky.social

Jail jail jail jail jail

Amy Feldman@amyfeldman7.bsky.social

*NEW* Colossal Biosciences’ Ben Lamm and Anduril’s Palmer Luckey team up on a new startup to genetically engineer war dogs for the military. Warhound comes out of stealth at $1.2B valuation For @forbes.com with @iainmartin.bsky.social and @mhunterhart.bsky.social www.forbes.com/sites/amyfel...

forbes.comBillionaires Palmer Luckey And Ben Lamm Spin Up Startup To Genetically Engineer Military DogsBen Lamm of de-extinction startup Colossal has teamed up with Palmer Luckey’s team at Anduril to create a dog that’s optimized for military use. The new “warhounds” will be cloned and gene edited.

Simone reposted

Hacker & Security News
@hacker.at.thenote.app

New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a small … #hackernews #news

thehackernews.comNew QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory AmplificationA remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a small batch of compressed HTTP headers that expands in memory to a much larger set, the attacker can force the server to use thousands of times more memory than it received, enough to run a default server

Simone reposted

Will Velida 🇺🇦
@willvelida.com

In all seriousness, absolute HugOps to all dealing with the fallout from this week. Very lucky that I don't have to do too much of that in my current job. Absolute scenes.

Simone reposted

Andrew Couts
@couts.bsky.social

NEW: AWS detected attempts to exploit the PHP vulnerabilities on October 17, four days before they were patched. Logs indicate multiple malicious actors tried to use the flaws. @lhn.bsky.social reports: www.wired.com/story/hacker...

wired.comHackers Exploited the PHP Vulnerabilities Days Before They Were PatchedAmazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They're now being “broadly exploited” across the internet.

Simone reposted

Molly White
@molly.wiki

truly a wild time to be alive when the cryptography world is split between those worried about quantum computers and those whose private key is “4”

Simone reposted

Liz Fong-Jones (方禮真)
@lizthegrey.com

the fact that an intermediate CA in India that sells only into the Indian market, when compromised, can generate TLS certs for literally any website on the internet, that feels like a major trust boundary problem

Filippo Valsorda@filippo.abyssdomain.expert

After the firefighting is done (and a nap) we'll need to have a long, serious conversation about the state of non-browser non-platform X.509 verifiers. The Linux status quo is "a pile of PEM files behind a dumpster" and that's not an acceptable excuse for a root store in 2026.

Simone reposted

Liz Fong-Jones (方禮真)
@lizthegrey.com

Replying to @lizthegrey.com

someone who MITMs Terraform Cloud right now walks off with every customer's AWS AdministratorAccess OIDC permissions, given that Terraform AWS Provider isn't patched yet

Simone reposted

Phil Calçado
@philcalcado.com

All this talk about using only end-to-end tests for AI-written code makes me think the real winner of the AI race is going to be Buildkite.

Simone
@simoneb.bsky.social

OMG SLACK WHY ARE YOU MAKING LIFE SO HARD TODAY, I CANT RESIZE A WINDOW, SAVED ITEMS ARE NOT "TO DO's" I JUST SAVED THEM, THE EMOJI REACT BUTTON MOVED GAHHH

Simone reposted

KubeFM
@kube.fm

🗣️ Ben Poland discusses unexpected Kubernetes scaling challenges when migrating CI from Jenkins to Buildkite, hitting internal throttling and etcd limits with thousands of smaller pods Watch: https://ku.bz/klBmzMY5-

Simone reposted

Jason Kint
@kint.bsky.social

you can't be serious. This reads Meta/Facebook/Insta is looking to grant itself the rights to scrape websites across the open web - and train Meta's AI - if a company after Oct 30, 2026 uses Facebook, Instagram, WhatsApp or other Meta services. So every biz. Read that again. Outrageous. 1/5

Simone
@simoneb.bsky.social

this is a great & actually readable article: "the role of devex is to remove barriers that rob people in management and in engineering of their right to pride of workmanship, this is exactly the coupling my data suggests may be breaking once AI enters the picture." annievella.com/posts/the-pr...

annievella.comThe Productivity-Experience Paradox - Annie VellaThis is the second post in a series I’m writing about the most interesting findings from my Masters research on the impact of AI on software engineering, as well as some of the thoughts I’ve had since...

Simone reposted

Cassidy
@cassidoo.co

If you had a ticket to Grace Hopper and have not cancelled your plans to go to San Francisco, go to @github.com's LinkedIn right now if you'd like to attend GitHub Universe for free ❤️

Simone reposted

henry ✷
@strange.website

it's a new season for technology & for technologists, and our labor and its impact to the world are both more greater and more dangerous than ever. how do we make sense of work in an industry many of us no longer recognize?

henry.codesDark Forestry
Simone
@simoneb.bsky.social

Interesting! Code Review is now generally available on Claude Team and Enterprise plans.Eligible Claude Enterprise organizations can claim at least $10,000 in Code Review credits by Jan 15, 2027. lnkd.in/e_2T4ggS

Simone reposted

Hacker & Security News
@hacker.at.thenote.app

npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover Bloom Security researchers found that npm’s Trusted Publishing feature let an attacker push new versions of someone else’s package without stealing a credential. The attacker only needed to register a GitHub repo… #hackernews #news

helpnetsecurity.comnpm Trusted Publishing flaw exposed 1,500+ npm packages to takeoverBloom Security researchers found that npm’s Trusted Publishing feature let an attacker push new versions of someone else’s package without stealing a credential. The attacker only needed to register a GitHub repository name the maintainer had left behind. Bloom counted more than 1,500 npm packages exposed this way, and GitHub, which owns npm, says it has shipped fixes. The exposed packages have more than 10 million downloads in total and more than a million a …
Simone
@simoneb.bsky.social

Mildly spicy but also a trend atm. IMHO this is the same evolution as cloud adoption. Early adopters went all in and then everyone realised you need some governance and guardrails to get good outcomes.

Butlerian Jihadist of House Dornick@shimminykricket.blacksky.app

Harvard just dropped a study AI productivity in software engineering and it found the average increase in productivity from using Claude code is.....zero and for exactly the reasons you'd think fion.ac/jellyfish.pdf

Simone reposted

Techmeme
@techmeme.com

A theoretical computer scientist, citing sources, says AI labs have quietly started probing whether their models can break important cryptographic protocols (Scott Aaronson/Shtetl-Optimized) Main Link | Techmeme Permalink

Simone reposted

Robert "The Bobby Yaga" McNees
@mcnees.bsky.social

Very sad to hear that Margaret Hamilton has passed away. Here's a short thread about her role in the Apollo mission, and her lesser-known work on the simulations that led to the discovery of Chaos Theory. 🧪 👩‍🔬 ⚛️

news.mit.eduMargaret Hamilton, computing pioneer who led software development for the Apollo program, dies at 90Margaret H. Hamilton, a profoundly influential computer scientist best known for leading the software engineering team at MIT’s Instrumentation Lab during NASA’s Apollo program, died at age 90.
Robert "The Bobby Yaga" McNees@mcnees.bsky.social

Margaret Hamilton, a pioneer of software engineering who led NASA's in-flight software team for the Apollo mission, was born #OTD in 1936. 🧪 🔭 👩‍🔬 Image: NASA