security

Learn how Microsoft Entra ID’s flexible Federated Identity Credentials eliminate the need for secrets when connecting services across platforms. This practical guide shows you how to securely authenticate GitHub Actions workflows to Azure resources without storing credentials.

Experian, the multinational consumer credit reporting and data aggregator company, is planning to sell off more of your data to third-parties starting February 5, 2025.

I discovered that you can get anyone’s true email address (Google Account) if they are hosting their email on Google Workspaces from their alias, even if the alias is not on the same domain.

The other day one of my friend shared an interesting letter they received, that I thought I’d cover on this blog. It all started with them peeking at their USPS Informed Delivery digest to see that there was a letter headed to them postmarked with an automated Canada Post label.

A short overview of how modern app stores can lead you or your relatives to install authenticator apps that are not really authenticator apps.

I have nothing against the concept of aliases at its core, but I have a lot to say about it being treated as some kind of security barrier against the bad guys and gals busting into your private accounts. Email aliases are a privacy and not a security measure.

To remove the toil of writing authentication code directly, our team at Microsoft has been working on adding a new tool to the developer toolbox - an authentication broker.

There’s a good reason why I don’t want a cloud account to manage my networking infrastructure.

How to collect and aggregate MSAL metrics in the cloud with minimal code.

I decided to host a static site on Azure App Service. I also decided that it would be nice if I could restrict who could access the site.