Microsoft identity platform – Secure applications and APIs by validating claims

Comments (2)

motorest · 2d ago

Submitter here. I stumbled upon this link while reading the comment section of this post:

Abusing Entra OAuth for fun and access to internal Microsoft applications https://news.ycombinator.com/item?id=44850681

It should be an interesting read if you work with authentication or use Microsoft Entra in any way.

fuzzfactor · 2d ago

In the last few months, I have also found the new ZTHELPER service has been implanted into Windows 11 during a routine update.

Open models by OpenAI (openai.com)

GPT-5 (openai.com)

Genie 3: A new frontier for world models (deepmind.google)

Fight Chat Control (fightchatcontrol.eu)

Perplexity is using stealth, undeclared crawlers to evade no-crawl directives (blog.cloudflare.com)

GitHub is no longer independent at Microsoft after CEO resignation (theverge.com)

uBlock Origin Lite now available for Safari (apps.apple.com)

Show HN: I spent 6 years building a ridiculous wooden pixel display (benholmen.com)

Ultrathin business card runs a fluid simulation (github.com)

I want everything local – Building my offline AI workspace (instavm.io)

I tried every todo app and ended up with a .txt file (al3rez.com)

Show HN: Kitten TTS – 25MB CPU-Only, Open-Source TTS Model (github.com)

Emailing a one-time code is worse than passwords (blog.danielh.cc)

Things that helped me get out of the AI 10x engineer imposter syndrome (colton.dev)

Debian 13 “Trixie” (debian.org)

Modern Node.js Patterns (kashw1n.com)

Vibechart (vibechart.net)

Claude Opus 4.1 (anthropic.com)

I gave the AI arms and legs then it rejected me (grell.dev)

Wikipedia loses challenge against Online Safety Act (bbc.com)

Claude Code IDE integration for Emacs (github.com)

Show HN: The current sky at your approximate location, as a CSS gradient (sky.dlazaro.ca)

How I code with AI on a budget/free (wuu73.org)

Try and (ygdp.yale.edu)

GPT-5: Key characteristics, pricing and system card (simonwillison.net)

Wikimedia Foundation Challenges UK Online Safety Act Regulations (wikimediafoundation.org)

Claude Code is all you need (dwyer.co.za)

Job-seekers are dodging AI interviewers (fortune.com)

Monitor your security cameras with locally processed AI (frigate.video)

OpenFreeMap survived 100k requests per second (blog.hyperknot.com)

Mastercard deflects blame for NSFW games being taken down (pcgamer.com)

Jim Lovell, Apollo 13 commander, has died (nasa.gov)

Writing a good design document (grantslatton.com)

Qwen-Image: Crafting with native text rendering (qwenlm.github.io)

Ask HN: How can ChatGPT serve 700M users when I can't run one GPT-4 locally?

Historical Tech Tree (historicaltechtree.com)

Tesla withheld data, lied, misdirected police to avoid blame in Autopilot crash (electrek.co)

Cursed Knowledge (immich.app)

The Chrome VRP Panel has decided to award $250k for this report (issues.chromium.org)

Objects should shut up (dustri.org)

Getting good results from Claude Code (dzombak.com)

Flipper Zero dark web firmware bypasses rolling code security (rtl-sdr.com)

The Framework Desktop is a beast (world.hey.com)

GPT-OSS vs. Qwen3 and a detailed look how things evolved since GPT-2 (magazine.sebastianraschka.com)

GPT-5 for Developers (openai.com)

Linear sent me down a local-first rabbit hole (bytemash.net)

Meta Leaks Part 1: Israel and Meta (archive.org)

US reportedly forcing TSMC to buy 49% stake in Intel to secure tariff relief (notebookcheck.net)

How we made JSON.stringify more than twice as fast (v8.dev)

Japan: Apple Must Lift Browser Engine Ban by December (open-web-advocacy.org)

Microsoft identity platform – Secure applications and APIs by validating claims

Comments (2)