nathanmcnulty.com
Loves Jesus, loves others | Husband, father of 4, security solutions architect, love to learn and teach | Microsoft MVP | @TribeOfHackers | 🐘infosec.exchange@nathanmcnulty
👤 Joined on 27 April 2023
Followers
Following
Total Posts
@nathanmcnulty.bsky.social@nathanmcnulty.bsky.social → @nathanmcnulty.comThis doesn’t seem wrong to me? Scripts shouldn’t have direct access to secrets, it’s a hopeless exfiltration vector. And yet, they’re being responsible and not breaking any existing stuff that uses their APIs, and promise to do security updates.
Show PostIt's really all about the use case, and the limits and mitigations that can apply. I'll allow user based service accounts if the application really needs that, and we can apply a trusted location to it for example.
Show PostI’d have thought it would know you well enough by now?
Show Post