The BoM has finally tamed SSL But what a price tag.

@troyhunt.com Talk about a long time coming, your favourite example site that didn't support TLS. www.itnews.com.au/news/the-bom...

Fair warning this is going to be different from my usual posting but this is making me laugh so I'm going to post it even if it's a little bit "horny on main."

New nerdy pick up line:

"You make me want to be US-EAST-1; I want to randomly go down on you."

Windows Server Update Services (WSUS) deprecation - Windows IT Pro Blog Remember: WSUS remains operational but is no longer investing in new features.

Well, the irony is that WSUS was deprecated by MS a year ago. techcommunity.microsoft.com/blog/windows...
FWIW I retired my last client from WSUS ~6 months ago, it's all Autopatch through Intune now. No excuse for deserialization bugs though ;-).

YouTube video by SysAdmin Weekly SysAdmin Weekly - 028 - SysAdmin Horror Stories Volume 1

Fancy some spooky and scary IT horror stories for Halloween? Here's me and three less scary guys in our recent Sysadmin Weekly podcast for your enjoyment.
www.youtube.com/watch?v=uiLP...

@patrick.risky.biz Loved the show last Wed. Quick update on the WSUS situation, a lot of business networks (most?) use Intune / 3P MDM for Windows updates, not WSUS. Win Update for Business, now Autopatch lets you create rings / groups etc. with the binaries coming from MS, not WSUS.

There we have it - seen lots of reports of VPN appliances getting orgs owned over the last few years, but now At-Bay gives us the stats. www.at-bay.com/2025-insurse...

What Happened When AI Came for Craft Beer A prominent beer competition introduced an AI-judging tool without warning. The judges and some members of the wider brewing industry were pissed.

@troyhunt.com Since you're into craft beer and tech :-) www.404media.co/what-happene...

@troyhunt.com Watching the recording of your weekly update. I have the same Sony camera and Elgato camlink as you do, and had the same problem earlier this year. Mainly in Teams training session delivery. Bought a new Elgato camlink (USB-C instead of A) and that's fixed it.

Medieval Kings didn't have nuclear launch codes.

Obviously, makes for a good headline though.

Information Commissioner sues Optus over 2022 data breach Civil penalties of up to $20.9 trillion mooted.

@troyhunt.com What do you think of a $ 20.9 Trillion fine for Optus? ia.acs.org.au/article/2025...

@nycjayjay.bsky.social Long time TBP reader. As someone following the decline of the US from Australia what makes you think you still have democracy? If there's a big swing against R in the midterms, can't he just roll up with his 20X Gestapo + Hegseth's military and "change" the votes?

Buttercup is now open-source! Now that DARPA’s AI Cyber Challenge (AIxCC) has officially ended, we can finally make Buttercup, our CRS (Cyber Reasoning System), open source!

@patrick.risky.biz Can't wait for you and Adam to cover Buttercup - AI scans OSS package, finds vulns, patches them, tests the patch, all on automatic. From Trail of Bits - second place in the AIxCC competition. blog.trailofbits.com/2025/08/08/b...

Haven't used it, but should be possible. Nightmare for data governance teams though 😕. Everyone having copies of their own data outside of M365.

@patrick.risky.biz For what its worth, my clients all have end user granting disabled, and every app has to go through me to be approved.

@patrick.risky.biz A quick note on OAuth apps in Entra (last nights ep=- an end user can only ever grant permissions to an app to their own data, their calendar/inbox/OneDrive etc, both under the old default model, and the new one that's coming. Backup would need tenant access, so requires admin.

@patrick.risky.biz Quick clarification based on the last main show and the push snake oilers. Microsoft is defaulting to passkey for new personal MS accounts, they're not enforcing it for commercial accounts in Entra. In commercial only bound passkeys, through MS Authenticator are supported.

@samleecole.bsky.social Just watched the recording of the panel from the journalism festival. Great work. I'm in tech, a 404 subscriber, and I'm embarassed by what the male race and AI tech is inflicting on girls and women. Keep up the spotlight on these sites and apps!

ACF federal election scorecard 2025

www.acf.org.au/scorecard

World leaders: stand up to Trump, starting *now* Donald Trump is a bully. And like any bully…we need to stand up to him. If we don’t, our international world order is in danger. He’s already threatened to annex Canada, Greenland, and the Panama Can

Trump just orchestrated one of the most shameful moments in US history.

We need *all leaders* outside the US to stand up to Trump.

For that we need to show they have our backing. Add your name and share this link widely, it has never been more critical to have our voices heard:

WorldVsTrump.com

@robertwiblin.bsky.social Watched your excellent podcast on OpenAI. On defining AGI, the agreement with Microsoft says that's reached when OpenAI generates at least 100B in profits.https://www.thurrott.com/a-i/openai-a-i/314943/report-microsoft-openai-tied-agi-metric-to-profits-not-intelligence

52 years. We live on opposite sides of the planet now, speak regularly.

How Israel's Mossad tricked Hezbollah into buying explosive pagers | 60 Minutes Pagers exploded across Lebanon in September. Retired Mossad agents, key to the operation, tell 60 Minutes Israel's plot started years ago with getting Hezbollah terrorists to buy walkie-talkies.

@patrick.risky.biz Don't know if you saw this, some interesting details on the exploding pagers and walkie talkies. www.cbsnews.com/video/israel...

@campuscodi.risky.biz As a long time risky.biz news reader, I know you put links to recent cyber security reports in it. Hornetsecurity just published ours, find it here. www.hornetsecurity.com/en/cyber-sec...

Why women last just 4 years in cyber security Study points to workplace bullying and 24/7 culture.

@girlgerms.wtf Thought you might find this interesting Jess ia.acs.org.au/article/2024...

It's the year of the dragon! 🐉 🎨
Quote repost with your dragon art (Mine is from 12 years ago...)